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= IT challenges could trump the benefits of consolidating U.S. intelligence agencies. 
= A lawsuit filed by former client BSkyB could give EDS another black eye. f 
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The new 
802.N1i security 
standard will help, but 
protecting wireless LANs 
remains a very complex job. 
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J.D. Edwards Users Still Aren’t 
Sold on PeopleSoft’s Takeover 


Customer base cites 
‘mixed bag’ one year 


into new ownership 


BY MARC L. SONGINI 
Twelve months after it paid 
$1.8 billion to buy business 
applications rival J.D. Edwards 
& Co., PeopleSoft Inc. has yet 
to get a big sales boost from 
the deal or anything close to 
the kind of acclaim it had 
hoped to receive from the 
users it inherited. 





Based on interviews with 15 
J.D. Edwards users and an in- 
formal poll of 48 IT managers 
that was conducted last week, 


PeopleSoft is far from winning | 


over its new customer base. 

Five of the users who were 
interviewed said unequivocal- 
ly that life with PeopleSoft is 
better than it was under J.D. 
Edwards. But several said it’s 
worse in at least some aspects, 
and the others indicated that 
they’re still on the fence about 
the acquisition. 





Vadaatlastansl MM bacseslbecclbatatectetecettatbeadl 
EBXBBIF TERAAEAERAAEEEEEERERERFIRG 49103 


#0S76356/CB/6% CU2884340 B82 


SHERI MARION 
PROQUEST 


12669 
53 


a\ 


omy 
308 N ZEEB RD 
ANN ARBOR MI 48183-1553 





| ve 


The poll of Computerworld 
subscribers reflected even 
sharper attitudes toward the 
buyout, which PeopleSoft 
completed last Aug. 29 by pur- 
chasing the remaining J.D. Ed- 


| wards shares that it didn’t al- 
| ready own. Twenty-one of the 
| J.D. Edwards users who re- 


sponded said PeopleSoft’s 


takeover has had a negative ef- 


fect on them, while six said 
the deal has been positive. 

In addition, 29 of the respon- 
dents said they would have 
preferred that J.D. Edwards re- 
main independent. Ten voiced 
support for the company be- 
ing acquired. 

“Tt’s a mixed bag,” said J.D. 
Edwards user Fredrick Pond, 
referring to PeopleSoft’s own- 
ership. “They are our key ven- 

PeopleSoft, page 13 
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HP Rushes to Fix 


Order System, 
Reassure Users 


Vendor says ‘worst is behind us’ on shipment 
snafus caused by rollout of supply chain apps: 


BY PATRICK THIBODEAU 
CHICAGO 


Hewlett-Packard Co. engaged 


in damage control at HP 
World last week, telling users 
it’s working in “war room” 
fashion to fix the order-proc- 
essing problems that have af- 
fected its shipments of 
servers and storage de- | i 
vices. HP also said its 
weak third-quarter re- 
sults aren’t a harbinger 


| of any changes in its 
| technology road map. 





| chain “to be just about fully re- 
| covered by the end of August.” 


Joe Nadler, a director in HP’s 
enterprise systems unit, told 


| customers at one conference fo- | 
| month. But IDX, which devel- 


rum that the company expects 
its server and storage supply 


“There’s aggressive plans in 


Utility to Make 
IT Framework | 
Open-Source 


Hopes other users 
will improve its work 


BY CAROL SLIWA 
Duke Power Co. plans to go 
from consumer of open- 
source software to contributor | 
on Sept. 1 by making an inter- 
nally developed application 

framework available to other 
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place to make sure we catch 
up on late customer orders, 
and unfortunately, we did have 
some significant delays,” 
Nadler said. But he added that 
the problems have been iden- 
tified. “We’re now completing 
the fixes,” he said. 

Among the users on 
i the receiving end of 
the order-processing 
problems was Patrick 
Slattery, a systems 
manager at IDX Sys- 
tems Corp. in South 
Burlington, Vt. Slattery or- 
dered two Intel-based Pro- 
Liant servers from HP last 


ops software for health care 
providers, is still awaiting the 
delivery of the systems. 

HP World, page 41 


| companies through the 
SourceForge.net Web site. 


The Charlotte, N.C.-based 
power company spent about 
1,000 hours over the course of 
a year building its framework, 
which supports development 
of applications built around 
Microsoft Corp.’s .Net tech- 


| nology. By turning the frame- 


work over to the open-source 
community, Duke hopes that 
other corporate developers 
will improve on its work. 
“This is somewhat of an ex- 
periment to see how much 
Duke, page 9 





The new stud on the server farm. 
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Presenting the new Xserve’ G5, a wickedly fast, 
extremely compatible and refreshingly affordable 1U 
server from Apple: 

With dual 2GHz 64-bit G5 processors, it achieves blazing 
speeds of up to 30 gigaflops. It’s so powerful, in fact, that 
the U.S. government is deploying’ 1,566 Xserve G5 servers to 
create one of the world’s fastest supercomputers, capable of 
up to 25 trillion calculations per second. 

And it comes complete with Mac OS’ X Server, Apple's 
UNIX-based operating system that provides a complete suite 
of standards-based network services with no per-client fees. 
So whether you have Mac; Windows, UNIX or Linux clients, 
Xserve is ideal for cross-platform file sharing, hosting 
dynamic websites, streaming audio and video and running 
powerful J2EE applications — right out of the box. 

Of course, its most impressive feature may be its 


price, starting at just $2,999" The new Xserve G5. 
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EMC CLARIION® CHANGES THE WAY YOU THINK ABOUT STORAGE. Announcing the CLARiiON -AX100. 
With the quality and high availability that CLARIION is known for. ina smaller package that’s right for. 
any business. It’s powerful, yet simple to manage. SAN ready. User installable. With replication'and 
management functionality. All-at a price that’s equally small, starting at $5,999. To learn more, visit 
www.EMC,com/backup. Or call 1-866-464-7381. 


Find an authorized EMC Velocity? Partner at www.EMC.com/velocity. 


EMC? EMC, CLARION, and where information lives are registered trademarks ot EMC Corporation, © 2004 EMC®* Corporation. All rights reserved. 











Backing Up the Edge 


In the Technology section: Thanks to data repli- 
cation and disk-to-disk backup technologies, 
IT is increasingly redirecting remote office 
backups to the data center, where they can be 
more easily and reliably managed. Page 22 
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OPINIONS 


Rx for Success 


In the Management section: Why do doctors 
resist hospital safety technology? Because it 
disrupts workflow and slows them down. 
Here’s how to get safety systems right and 
motivate doctors to give them a try. Page 27 
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Intelligence agencies need 

a technology blueprint and 
better systems integration if a 
proposed overhaul is to suc- 
ceed, officials testify during 
congressional hearings. 


Hurricane Charley didn’t 
catch IT managers unpre- 
pared, but recovery efforts 
were complicated by telecom- 
munications deficiencies. 


Ford abandons an Oracle 
procurement system after four 
years in favor of a “proven” 
set of custom-developed 
mainframe applications. 


EDS gets sued by the U.K.’s 
largest satellite TV broadcast- 
er over a CRM development 
deal that was terminated in 
2002. But the IT services firm 
says it will file a countersuit. 


Hewlett-Packard plans to 
offer a service to help IT 
managers scan and remediate 
security vulnerabilities in 
network devices. 


Motorola completes the latest 
phase in a rollout of informa- 
tion life-cycle management 
software in its PCS unit’s 
North American operations, as 
part of an effort to cut the size 
of its production databases. 


Many IT contracts fail to 
include performance criteria 
and “guarantees” from vendor 
sales pitches, say experts. 


Microsoft tries to appeal to 
mainframe and iSeries users 
with an upgrade of its Host 

Integration Server software. 


19 
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Wi-Fi Plays Defense. The 
new 802.lli wireless LAN 
security standard is a big step 
forward, but Wi-Fi LANs still 
have some vulnerabilities. 


Future Watch: Software Flight 
Plan. Paul D. Nielsen used to 
run a $3 billion research lab 
for the U.S. Air Force. In his 
new role as CEO of Carnegie 
Mellon’s Software Engineer- 
ing Institute, the retired gen- 
eral explains how his experi- 
ence will benefit the SEI’s 
development projects. 


Security Manager’s Journal: 
Antivirus Service Troubled by 
TLS. A complex Transport 
Layer Security deployment 
gets messier when an antivirus 
service is added to the mix. 
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: 30 IT Survival 


: 32 


Guide. Forty 

years in IT 

have taught 

Ace Hardware 

CIO Paul 

Ingevaldson a thing or two, 
and in this valediction, he 
shares some nuggets with his 
IT colleagues. 


No Free Lunch. Open-source 
software is free — or is it? It 
comes with rights and obliga- 
tions, and attorney Larry 
Rosen says IT managers need 
to understand both. 


Career Watch. Leveraging 
your skills; how project lead- 
ers really get picked; and IBM 
hits college campuses. 


10 On the Mark: Mark Hall looks 


at automated testing process- 
es for remote users and a 
managed service for indus- 
trial controls monitoring. 


Maryfran Johnson distills all 
of the IT management advice 
you'll ever hear into three 
simple mantras 


Virginia Robbins dislikes 
companies that are out to 
make as much money as pos- 
sible in the short term. 


David Moschella sees ramifi- 
cations for workplace IT now 
that employees can get better 
gear on their own. 


Tommy Peterson thinks a fed- 
eral attempt at consolidating 
Americans’ electronic health 
records is a worthy cause — 
and a daunting project. 


33 Edward Smith advises against 


reacting to security threats 
defensively, because adding 
technology without a strategy 
can leave your organization 
more vulnerable. 


42 Frankly Speaking: Frank 


Hayes notes that when it 
comes to negotiating with 
vendors, if you can’t walk 
away from the table, you have 
no leverage at all. 
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XP SP2: What You Need to Know 
SOFTWARE: Windows XP Service Pack 2 
could have some unexpected effects on your 
company’s applications, mobile workers and 
more. Two Avanade consultants offer advice 
on how to prepare. @ QuickLink 48954 


Seven Habits of Highly 
Effective ID Management 
SECURITY: These identity management 
must-haves can help you choose the best 
system for your company, says Computer 
Associates’ Bilhar Mann. @ QuickLink 48182 


Blogosphere 
See our editors’ weblogs on security, careers, 
operating systems, mobile/wireless and 


more. @ QuickLink 24000 


ONLINE 
DEPARTMENTS 


Breaking News 

@ QuickLink 21510 
Newsletter 
Subscriptions 

© QuickLink 21430 
Knowledge Centers 

© QuickLink 22570 
The Online Store 

© QuickLink 22420 





6 __ COMPUTERWORLD August 23, 2004 


NEWS 


www.computerworld.com 





Nortel Plans Job 
Cuts, SAP Rollout 


Nortel Networks Ltd. reported es- 
timated financial results for the 
first half of this year and said it 
will lay off 10% of its workforce, 
or about 3,500 employees. To 
further cut costs, Nortel plans to 
install SAP AG’s business appli- 
cations throughout its operations 
and eliminate some of the 100- 
plus systems it now uses. The 
company also said CIO Albert 
Hitchcock now reports directly to 
President and CEO Bill Owens. 
Brampton, Ontario-based Nor- 
tel, which is restating its earnings 
back to 2001, said it expects to 
file full financial reports for the 


the end of September. The net- 
working equipment vendor also 
disclosed that it has fired seven 
finance executives and that the 


into its accounting practices. 


Oracle to Adopt 
Monthly Patching 


Oracle Corp. said it’s moving to a 
monthly release cycle for soft- 
ware patches, similar to the ap- 
proach that Microsoft Corp. 
adopted last fall. In a statement 
announcing the plan, 9racle said 
that switching to a more pre- 
dictable patching schedule “is the 
right thing for our customers.” 
The company didn’t say when it 
expects to begin the monthly 
patch releases. 


Short Takes 


SAP today will announce that the 
U.S. Postal Service plans to in- 
stall its human resources soft- 
ware to support the agency’s 
700,000 workers. The SAP appli- 
cations will replace homegrown 
systems that are 25 years old... . 
ORACLE said it expects within the 
next three months to roll out a de- 
layed set of business applications 
tailored for midsize users in the 
U.S. The software was initially 
due to ship last year. 


| 
| 
| 
| 
| 
| 
| 
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| ‘Technology blueprint, better integration | 


| needed to support melding of agencies 





| BY DAN VERTON 


PPROXIMATELY one 
year after the forma- 
tion of the Depart- 
ment of Homeland 


| Security — which was the 

| largest reorganization of the 

| federal government in 50 

| years — the U.S. intelligence 

| community is facing a similar 
| overhaul that some fear could 


threaten the meager progress 
made so far on information 


| sharing and IT integration. 
first two quarters of 2004 and re- eect ee 


vised figures for all of last year by | 


The recently released 9/1] 
Commission Report outlines a 


| stinging indictment of the 


government’s information- 


| sharing efforts and calls for 





; _, | the appointment of a national 
Royal Canadian Mounted Police - | intelligence director with full 
launching a criminal investigation | 


budgetary authority over the 


| country’s 15 intelligence agen- 
| cies and departments. A series 
| of congressional hearings last 


week focused on the long- 


| term impact that major orga- 


nizational changes might have. 
In conjunction with the pos- 





sible creation of a Cabinet-lev- 
el intelligence director's post, 
the Bush administration is 


| preparing to establish a Na- 
| tional Counter Terrorism Cen- 
| ter, which could incorporate 


the CIA's Terrorist Threat In- 
tegration Center and other 
personnel from that agency. 
But questions about lines of 


| authority, IT systems integra- 


tion and a host of other issues 
have TTIC Director John 


| Brennan concerned. 


Any information-sharing 
system must be “based on a 
clear understanding of who is 
responsible for what,” Bren- 
nan told members of the 
House Select Committee on 
Homeland Security. There 
also has to be an overall blue- 
print for IT investments, in- 
cluding strategic prioritiza- 
tion, interoperable hardware 
and software, and role-based 
data access, Brennan said. 

Even without the confusion 
that might arise from organi- 


Two Reports Criticize DHS 
For Lack of Progress on IT 


As the debate about adding a na- 
tional intelligence director pro- 
ceeds, two government reports 
are shedding new light on an 
existing dilemma: If DHS ClO 
Steven Cooper can’t wrestle that 
agency's sprawling bureaucracy 
into submission, can any IT man- 
ager be expected to help fix the 
nation’s problems with sharing of 
information about terrorism? 

In July, the DHS inspector 
general issued a report conclud- 
ing that Cooper didn’t have the 
political clout needed to develop 
an enterprise architecture inte- 
grating the IT systems of the 22 
agencies within the DHS. 

Cooper “is not a member of 
the senior management team 


with authority to strategically 
manage departmentwide tech- 
nology assets and programs,” 
the inspector general's report 
said. It added that there is no for- 
mal reporting relationship be- 
tween Cooper and the ClOs of 
major DHS divisions. 

In another report that was 
submitted to Congress on Aug. 6 
and made public last week, the 
Government Accountability Of- 
fice (GAO) found that the DHS 
“does not yet have the necessary 
architectural blueprint to effec- 
tively guide and constrain its 
ongoing business transformation 
efforts and the hundreds of 
millions of dollars that it is invest- 
ing in supporting information 





TT Hurdles Complicate 
Intelligence Overhaul 


zational changes, homeland 
security and intelligence agen- 
cies are struggling to over- 
come IT problems, Brennan 
added. The issues he 
cited include “a 
plethora of legacy 
information systems 
and networks... 
{that] impede inter- 
operability.” 
Brennan noted » 
that TTIC analysts i 
use 22 federal net- 
works that are divid- 
ed into “sanctums,” 
which let them ac- 
cess data only ona 
need-to-know basis. 
Smashing organizational 
stovepipes is important, but 
“it’s not sufficient to share 


P 


| hard-copy information,” he 


said. 
Some members of Congress 


| also fear that the proposed 


changes might complicate the 


| DHS’s ongoing effort to con- 


nect state and local officials to 
the new Homeland Security 
Information Network. 

Two weeks ago, the DHS 


to 


fs 


PATRICK HUGHES 
VB UE a nT 
finish the rollout of 
SRE Ute 
4 ty information net- 
work this year. 





hosted a gathering of more 


technology assets.” 

According to the GAO, the 
DHS's IT blueprint “is missing 
most of the content necessary to 
be considered a well-defined ar- 
chitecture.” The GAO described it 
as “the result of an amalgama- 
tion of the existing architectures 
that several of DHS’s predeces- 
sor agencies already had.” 

In a written response to the in- 
spector general's report, DHS 
deputy secretary Adm. James 
Loy disagreed with the recom- 
mendation that Cooper should be 
part of the senior executive team 
reporting directly to him. The ClO 
is “already an integral member at 
each level of the IT investment 
review process,” Loy wrote. 

The DHS acknowledged the 


- problems with its enterprise ar- 


chitecture in a response to the 


> GAO's report. But the agency 


than 300 state and local offi- 
cials in Washington to train 
them to handle classified fed- 
eral information that will be 
made available on the net- 
work, said Patrick Hughes, as- 
sistant secretary for informa- 
tion analysis at the DHS. The 
network is currently being de- 
ployed and should be fully in 
place by year’s end, he added. 

Even so, “I don’t 
think we have licked 
the problem of com- 
plete coordination 
between the federal 
government and 
with the state and lo- 
cal government and 
private-sector cus- 
tomers for finished 
intelligence,” said 
committee chairman 
Rep. Christopher 
Cox (R-Calif.). 

At the FBI, there is 
still a basic need for secure 
communications, said Mau- 
reen Baginski, the agency’s 
executive assistant director 
for intelligence. “Our biggest 
need is secure communica- 
tions to our field offices and 
for secure [communications 
facilities],” she said. “In order 
to join this large intelligence 
community and be a healthy 
node on this network, we have 
to be able to operate in the en- 
vironment.” @ 48963 


added that the GAO had mea- 
sured its progress against “unre- 
alistic” expectations of how com- 
prehensive the first version of the 
architecture would be. 

Sateesh Lele, a former CIO at 
Avon Products Inc. and General 
Motors Corp.'s European opera- 


: tions, said the federal govern- 


ment desperately needs a cultur- 
al change. Lele, who is chairman 
of San Jose-based IT services 
firm Global Data Systems USA, 
noted that he has seen the same 
problems in the private sector. 

“| have seen innumerable ex- 
amples of this organizational 
mailaise in extremely large orga- 
nizations, and | have also seen 
some tough actions from the top 
which have fixed the problem,” 
he said. “This is not an IT prob- 
lem. It is a cultural problem.” 

~ Dan Verton 
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In Storm’s Wake, Fla. 


IT Managers See Need 


For Telecom Upgrades 


Communications problems complicate 
recovery efforts after Hurricane Charley 


BY LUCAS MEARIAN 
As Hurricane Charley blew 
through Port Charlotte, Fla., 
on Aug. 13, Kathleen Russel! 
stood in a dark closet 15 miles 
away with a flashlight in one 
hand and a cell phone in the 
other. She was trying to find 
out if the databases at the 
insurance agency where she 
works could be restored in 
time to handle claims from 
its 15,000 customers. 
Russell's company, Key 
Agency Inc. in Englewood, 


Fla., had contracted with a dis- | 
| Juno Beach, said 800,000 of 


aster recovery services firm to 
replicate its customer data to a 
backup facility in Massachu- 
setts. Workers there were able 
to restore the agency’s data 
within 10 hours. “That to me 
just boggles the mind,” said 
Russell, Key’s office manager. 
IT managers in the areas hit 


Switches back to 
mainframe apps 


BY MARC L. SONGINI 
Ford Motor Co. is pulling the 
plug on a 4-year-old procure- 
ment system based on Oracle 
Corp.’s software and switching 
all purchasing operations back 
to the mainframe applications 


that the newer technology was | 


designed to replace. 

Ford has invested unspeci- 
fied millions of dollars in the 
system, which was dubbed 
Everest and built around Ora- 
cle’s databases and business 
applications. But Ford 
spokesman Paul Wood last 
week confirmed that the au- 
tomaker has decided to shut 
down Everest and return the 
purchasing processes that 
were being run on the system 
to a set of custom-written 








| by Charley said last week that 
| although the storm took an 

| unexpected path through the 
| center of the state, they 


weren’t wholly unprepared 
because of lessons learned 


| from Hurricane Andrew 12 
| years earlier. For example, 
| they said, Andrew taught them 


to geographically disperse 

their data center operations. 
But Charley taught some 

new lessons, such as the need 


| to improve communications. 


Dennis Klinger, CIO at 
Florida Power & Light Co. in 


the utility’s 4.1 million cus- 
tomers in western and south- 
ern Florida were without pow- 
er last week. Recovery opera- 


| tions were going remarkably 


smoothly because of an abun- 


| dance of planning and past ex- 


perience, Klinger added. 


But there were some things 
that Klinger hadn’t counted 
on. “We use various cell and 
wireless providers,” he said 
“All of them experienced some 
very serious damage.” Broken 
connectivity between cellular 


| towers hampered the ability of | 


the utility’s emergency crews 
to communicate, he said. 

Florida Power & Light’s 800 
IT workers had several means 
of communication, including 
radios, cell phones and satel- 
lite-based phones. But Klinger 
said they experienced band- 
width-clogging traffic levels, 
particularly with the satellite 
phones. “We need to look at 
more reliable and wider-band- 
width satellite communica- 
tions that we can implement 
more quickly,” he said. 


Marvin Shumacher, director | 
| company, Health Management 
| Associates Inc. in Naples, Fla., 


of information systems at 
Heart of Florida Regional 


| Medical Center in Davenport, 


just outside Orlando, said last- 
mile network issues affected 
communications at the hospi- 
tal. The electric-powered cop- 
per wires running into the 


| building were knocked out of 


service by the storm, he said. 
But the hospital’s network, 

data center and radiology 

imaging systems remained 


Oracle Procurement System 


| mainframe applications. “We 


completed an evaluation of all 


| the production and nonpro- 
| duction procurement systems 


and made the decision to tran- 


| sition back to the proven, cur- 
rent system,” Wood said 


Dot-Com Era Origins 

The development of Everest 
began in 1999, at the height of 
the dot-com era. According to 
Wood, the project was sepa- 
rate from Covisint Inc., a Web- 


| based business-to-business ex- | 
| change for the automotive in- 


dustry that Ford and Oracle 
helped create. Covisint is now 


| owned by Compuware Corp. 


Wood said Ford started to 


| go live with the system in 


2000. He declined to say how 
many suppliers or internal 
business units the system sup- 
ports, but he noted that the 
technology is widely used in 


some form throughout Ford. 
Wood also wouldn’t com- 


ment about any problems with | 
the system. But sources indi- 


cated that Everest was ham- 


| pered by poor performance. 


Ford now plans to migrate 
some features from Everest to 
its mainframe system, using 
in-house developers. Wood 
said the company had contin- 


| ued to run the mainframe- 
| based procurement software 
| in tandem with Everest. 


Oracle issued a terse state 
ment about Ford’s decision to 


| send Everest to the scrap 


heap. “Oracle continues to 


| support Ford on its back-to- 


basics strategic initiatives and 


| IT projects,” the statement 

| said. “Given our desire to hon- 
| or anondisclosure agreement 
| in effect, it would be inappro- 


priate for Oracle to comment 


| on any specifics.” © 48939 
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if of Florida and left up to 1 million people without power. 

| online, running off of rack- 

| mounted battery units from 


American Power Conversion 


| Corp. in West Kingston, R.L., 


while backup power genera- 


| tors kicked in. 


Heart of Florida’s parent 


also operates Charlotte Re- 


| gional Medical Center in Pun- 
| ta Gorda — the area that was 
| hit hardest by Charley. 


Because of the storm’s er- 
ratic path, the Charlotte facili- 


| ty didn’t have time to evacuate 


73 patients or its staff before it 
hit, Shumacher said. Charlotte 
Regional lost power as well as 
its roof and the windows on 
its second and third floors. 

But Health Management As- 
sociates replicates data from 
its hospitals to backup data 
centers in Atlanta and Boul- 
der, Colo., according to Shu- 
macher. Company workers 
used the backup data and 
portable generators to restore 
Charlotte Regional’s systems 
by the middle of last week, he 
said. @ 48958 


Wi-Fi Hot Spots Keep Users Online 


Public-access Wi-Fi hot spots 
have become a key alternative 
for business and personal com- 
munications in the wake of 
Hurricane Charley's devastat- 
ing rampage across Florida. 

For example, the Florida 
franchisee for Panera Bread 
Co. last week reported a 50% 
increase in traffic on the free 
Wi-Fi wireless LAN service of- 
fered in its 34 restaurants in the 
state. John Wetzel, director of 
operations in Florida for War- 
ren, Ohio-based Covelli Family 
LLP, said he thinks that about 
seven in 10 of the Wi-Fi users 
at Panera Bread outlets in Flori- 
da are using the Internet con- 
nections for business. 

“We have people holding 
business meetings in our 
stores,” Wetzel said, noting that 
the loss of electricity and phone 
service has forced companies 
to resort to such measures. 

People looking for Internet 
access are also seeking out in- 
dependent Wi-Fi hot spot oper- 


ators. Lee Lorenzo, general 
manager of the Village Inn in 
the Orlando suburb of Winter 
Park, said her restaurant had its 
power turned on last Thursday. 
Four customers were already 
using the restaurant's Wi-Fi 
connection, and Lorenzo had 
fielded calls from several other 
people wanting to know if the 
service was operational. 

Nate Williams, who works 
as an event planner for an un- 
identified company, said he had 
just finished a three-hour Wi-Fi 
session at the Village Inn - the 
first time he had been able to 
log onto the Internet since the 
storm struck on Aug. 13. 

T-Mobile USA Inc., which 
provides paid Wi-Fi hot spots 
for several national retail 
chains, offered free services in 
Florida through last Monday. 
But a T-Mobile spokesman 
wasn't able to provide usage 
data for the company's Wi-Fi 
outlets in the state. 

~ Bob Brewin 
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Broadcaster Sues EDS 
Over CRM Contract 


U.K. satellite TV company claims firm 
failed to fulfill system development deal 





BY MARC L. SONGINI 
HE U.K.’S LARGEST 
satellite TV broad- 
caster sued Elec- 
tronic Data Systems 
Corp. last week over a $109 
million CRM development 
contract that was signed in 
late 2000 and then terminated 
two years ago. 

London-based British Sky 
Broadcasting Group PLC 
said it had filed a legal claim 
against EDS for “deceit, negli- 
gent misrepresentation and 
breach of contract” during the 
implementation of a CRM sys- | 
tem designed to support oper- 
ations at BSkyB’s call centers. 

A company spokesman de- 
clined to disclose the amount 
of money that BSkyB is seek- 
ing from EDS. 

BSkyB severed its relation- 
ship with EDS in early 2002 
after the IT services firm 
“failed to perform its contrac- 
tual obligations,” according to 
a statement issued by the 
broadcaster last week. After 
the deal was ended, BSkyB 
subsidiary Sky Subscribers 
Services Ltd. took over inte- 
gration work on the CRM 
project, which is expected to 
be completed “in the near fu- 
ture,” the company said. 


| 
| 


Contract Troubles 
The lawsuit is another poten- 
tial black eye for EDS, which 
has been struggling with prob- 
lematic contracts such as its 
intranet deal with the U.S. 
Navy and an agreement to de- 
velop a voice-over-IP network 
for The Dow Chemical Co. 
Dow and EDS agreed to end 
their contract in July, and Dow 
this month named IBM to take 
over as lead contractor 
[QuickLink 48668]. 

EDS spokesman Malcolm 
George said the Plano, Texas- 
based company had yet to re- 


| position, and there will be a 

| counterclaim in the several 

| millions of [British] pounds 

| for unpaid bills,” George said. 
| “It’s absolutely outrageous.” 


| suit after settlement discus- 
| that was to be built around 


| hardware from Sun Microsys- 
| tems Inc. and CRM software 





ceive BSkyB’s lawsuit. But he 


added that EDS denies its for- 
mer client’s claims and is 
ready to fight in court. “We’re 
going to vigorously defend our 


BSkyB said it filed the law- 


sions between the two compa- | 
nies failed. At issue is asystem | 





from Cupertino, Calif.-based 


HP to Offer Vulnerability 


Chordiant Software Inc., 
which specializes in business- 
to-consumer applications. 
The BSkyB spokesman con- 
firmed that the Chordiant 
software is still being used, 
but he declined to offer fur- 
ther details about the project. 
When the deal with EDS was 


| announced in 2000, BSkyB 
| said it planned to use the 


CRM system to integrate dis- 
parate data sources and create 
more comprehensive cus- 
tomer profiles. In addition, the 
company’s subscribers would 
be able to access information 
such as account and billing 


| data via phone calls, the Web 


or interactive TV services. 
Although the contract with 


| 





SS eee 


BRITISH SKY BROADCASTING’S call center in Livingston, Scotland. 


EDS was valued at $109 mil- 
lion, BSkyB said in its state- 
ment that it has spent a total 
of $310.8 million on software, 


| systems integration, infra- 


structure costs and a revamp 


| of its call center facilities. The 


company expects to spend an- 
other $91 million during the 
next four years to finish the 


Scanning 


Service as Part of IT Security Push 


| Tools to let users 


find, fix flaws in 
network devices 


BY JAIKUMAR VIJAYAN 


| AND PATRICK THIBODEAU 


Hewlett-Packard Co. last week 


| said it plans by year’s end to 


offer a security vulnerability 


| scanning and remediation ser- 


vice that’s designed to help 
companies identify and fix 


| weak spots on their networks. 


The as-yet-unnamed service 
will be based on technology 
called Active Countermea- 
sures, which HP has been test- 
ing internally for more than 


| two years, according to Tony 
| Redmond, vice president and 


chief technology officer at the 
HP Services business unit. 
The scanning tools will al- 
low IT managers to identify 
flaws in any devices on their 
networks, including servers, 


| PCs and “transiently” con- 


nected products such as hand- 
held computers, Redmond 


| ny in the market- 





said. It can also protect net- 


works via measures such as 
installing patches, imposing 
network access restrictions or 
quarantining vulnerable or in- 
fected systems. 

The move by HP will put it 
in a crowded field. IBM, Com- 
puter Associates International 
Inc. and IT security vendors 
such as Internet Security Sys- 


tems Inc. and Qualys Inc. offer 


similar services or products 
for automated vulnerability 
assessment, discovery, reme- 
diation and reporting. 
Whether HP would have an 
advantage over its rivals will 
depend on the specifics of its 
offering, said Rusty Robinson, 
a technical manager at Intrado 
Inc., a Longmont, Colo.-based 
provider of 9-1-1 
infrastructure sys- 
tems and services. 
HP “would just be 
one more compa- 


place to get those 
services from,” 
he said. 

The fact that 


| 





HP seems 
to wax 
and wane in the 
security space. 


PETE LINDSTROM. 
ANALYST, SPIRE SECURITY 


HP is among the larger ven- 
dors to offer such a service 

is noteworthy, said David 
Krauthamer, director of infor- 
mation services at Advanced 
Fibre Communications Inc., a 
maker of telecommunications 
equipment in Petaluma, Calif. 
“The market has been pretty 
niched so far,” Krauthamer 
said. “HP can certainly bring 
their clout and scale to the 
market.” 


| Broad Access Needed 


But the “fairly wide access” to 
internal systems that HP or 
other providers of such ser- 
vices would need makes the 
offering a no-go at Danfoss 
A/S, said Brian Andersen, a 
systems program- 
mer at the Den- 
mark-based man- 
ufacturer of hy- 
draulic systems, 
compressors and 
other industrial 
equipment. Dan- 
foss does its own 
vulnerability test- 





rollout and maintain the CRM 
system for its subscriber base, 
which now stands at about 


7 million. @ 48922 


CASE CLOSED 


EDS and the U.K.’s National Health Service 
settle a dispute over another contract: 


QuickLink a4890 
www.computerworld.com 


ing, a job it wants to keep in- 
house “so we know ourselves 
what’s going on and how to fix 
it,” Andersen said. 

The new service isn’t HP’s 
first foray into IT security. 
Since last September, it has 
bought security tools through 
acquisitions of Baltimore 
Technologies Inc., Novadigm 


| Inc. and TruLogica Inc. 


But so far, HP has done a 
poor job of articulating how it 
plans to use the technologies 
to benefit users, said Pete 
Lindstrom, an analyst at Spire 
Security LLC in Malvern, Pa. 

“HP could probably be a for- 
midable player if they wanted 
to,” Lindstrom said. But, he 
added, “HP seems to wax and 
wane in the security space.” 
Less than a year after the Bal- 
timore Technologies purchase, 
for instance, “you just don’t 
hear about the technology 
anymore,” he said. 

Raymond said HP plans to 
roll out a suite of identity 
management tools next year 
based on technology from Bal- 
timore and TruLogica. It also 
is setting up a Trusted Com- 
puting initiative designed to 
deliver securely configured 
hardware and software to 
users, he said. @ 48967 
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Motorola Uses ILM Tools to Control Database Growth 


Software migrates data off its servers to 
cut capacity needs, boost performance 





BY LUCAS MEARIAN 

Motorola Inc. last week said it 
has completed the second of 
four phases in a planned com- 
panywide rollout of informa- 
tion life-cycle management 
(ILM) software that has cut 
the size of production data- 
bases by as much as 50% in 
some business units. 

The database reductions are 
enabling Motorola to stave off 
additional server and storage 
purchases as the company 
consolidates its hardware in- 
frastructure by moving sys- 
tems from remote locations to 
a data center in Chicago, said 
Bill Brewer, global IT configu- 
ration manager at Motorola’s 
Personal Communications 
Sector (PCS) business unit. 

The ILM rollout should also 
help Motorola better meet the 
financial reporting require- 
ments of the Sarbanes-Oxley 
Act by keeping data online 
and easily accessible without 
eating up space on application 
servers, according to Brewer. 

He declined to disclose the 
cost of the project, other than 
to say that it’s a multimillion- 
dollar initiative. 

Schaumburg, Ill.-based Mo- 
torola is using OuterBay Tech- 
nologies Inc.’s Application 
Data Management software to 
manage data growth in ERP 
systems built around Oracle 
Corp.’s databases and E-Busi- 


Reasons for adopting 
eerily te 
archiving tools 


PUM rer Mirae) 
Tee a am aur ee 


Database recovery times can 
be shortened because there is 
Cre Ont ee 


Ru eee Uns 
copies of databases, saving 
more storage space. 


Historical data can be kept 
CCRC Rue e IP LlaT 
requirements. 





ness Suite applications, Brew- 
er said. Historical customer 
account information is auto- 
matically migrated from pro- 
duction databases running on 
Sun servers to EMC Corp.’s 
Symmetrix disk arrays. 

“As Oracle applications ma- 
ture, you use more disk space 
... $0 you will be taxing your 
database at a higher level,” 
Brewer said. “There’s only so 


Continued from page 1 


Duke 


value can be gained from the 
open-source community,” said 
Charlie Ward, the utility’s 
manager of technical architec- 
ture. He added that because 
Duke’s developers have been 
active users of open-source 
software, they now want to 
give something back to open- 
source developers. 

It’s difficult to gauge how 
many other user companies 
have turned significant appli- 
cation development initiatives 
into open-source projects. 

Patrick McGovern, director 
of SourceForge.net, said the 
site gets about 70 new open- 
source projects each day, but 
it doesn’t track their lineage. 
He said what Duke is doing is 
“certainly not unique,” but he 
couldn’t provide an estimate 
of how many similar projects 
have been launched. 

Earlier this year, Brunswick 
Corp.’s Web Den Interactive 
(WDD technology subsidiary 
used SourceForge.net to re- 
lease an open-source business- 
integration engine that it had 
built to help connect WDI’s in- 
dependent dealers. But Vernon 
Hills, Ill.-based WDI has now 
released its application inte- 
gration tool as a commercial 
product, called Redberri, said 
a WDI spokesman. 

Mark Driver, an analyst at 
Gartner Inc., said he has heard 
about individual programmers 
getting permission from their 





| much tuning you can do. So 


it’s either rip the data out or 


do something else.” 


Motorola has set the ILM 


| software’s policy engine to 
| migrate data that hasn’t been 
| accessed by end users for 15 


months. The PCS business 


| unit initially rolled out Cuper- 


tino, Calif.-based OuterBay’s 
software in its China opera- 


| tions in 2001 and was able to 
| cut database sizes in half 


there. 
The company completed 
the North America rollout of 


employers to make software 


| components available under 
| Open-source licenses. But Dri- 
| ver said he hasn’t seen any ma- 


jor companies make significant 
portions of their custom devel- 


opment work open-source. 


Many companies have been 


| hesitant to release their work 
| on an open-source basis be- 


cause of intellectual property 


| concerns, Driver said. He 


added that service and support 
are also issues because open- 
source projects require com- 


| mitments of time and money. 
| “What doesn’t work is just 


dumping the software onto a 


| developer portal,” he said. 


Thomas Murphy, an analyst 
at Meta Group Inc., also said 


| that lots of companies have re- 


leased pieces of their code to 


| the open-source community. 


But he doesn’t think many wiil 
push out frameworks like the 
one Duke is releasing. “Shar- 
ing your competitive differen- 
tiators normally is seen as a 
bad idea in commercial enti- 


| ties,” Murphy said. 


Seeking Support 

But Duke doesn’t view the 
framework as a competitive 
advantage. “Duke Power is not 
a software company. We’re an 
energy company,” Ward said. 
“We're more interested in get- 
ting continued support from 
the open-source community 
to improve our software.” 

The idea for the open-source 
contribution took shape as 
Duke began to define an enter- 
prisewide architecture to sup- 


the software in mid-July and 
plans to finish similar projects 
in European and South Ameri- 
can operations by the end of 
2005, Brewer said. 

He added that the rollout 
in North America has boosted 
performance on the PCS unit’s 
Oracle database servers by 
62%, mostly as a result of the 
reduction in data. 


At the Bleeding Edge 

| Ray Paquet, an analyst at 
Stamford, Conn.-based Gart- 
ner Inc., said database archiv- 





= DUKE ENERGY designed its appli- 
PRU mR ss) 8 
business needs and reduce IT 
development costs. 


| port its business needs and re- 
| duce development costs, ac- 
cording to Ward. Duke wanted 
a common framework to en- 

| force consistency, reduce the 
amount of work its developers 
need to do and help them 

| transition from Microsoft’s 
Visual Basic 6 to the object- 
oriented development tools 
they will use with the newer 
Visual Studio .Net technology. 
| The framework that Duke 

| will release under the open- 
source Common Public Li- 
cense includes a data abstrac- 
| tion and data access layer; 
exception logging (built on 
Log4net open-source technol- 
ogy); EncryptionHelper, 
which aids in encapsulating 
encryption/decryption se- 
quences; XMLHelper for seri- 


objects to and from XML and 
XML schema validation; Secu- 
rityHelper, for authenticating 
and authorizing against an Ac- 








alization and deserialization of | 
| work together. I won’t say 
| they’ve solved every problem, 


| ing products from companies 
| such as OuterBay, Princeton 


Softech Inc. and Applimation 


| Inc. are still on the bleeding 


edge of technology. But 
they’re prompting a flood 
of inquiries from prospective 


| users, he added. 


Slow database throughput 
due to a glut of data is “a busi- 
ness problem, not a technol- 
ogy problem,” Paquet said. 

IT managers need to get the 


| business side involved early 

| on to decide issues such as 

| what data should be archived, 
| how long it should be kept and 
| who can access it, Paquet ad- 


| vised. @ 48944 


| tive Directory domain; and an 
| XMLMessage object. 


In addition, Duke will re- 


| lease models and Unified Mod- 


eling Language diagrams that 


| describe how the pieces can be 


used with .Net applications. 
Demonstration applications 


| will also be included, as will 
| Microsoft’s freely available 


SQL Helper Data Access tool. 
To spread the word about 

its open-source contribution, 

Duke plans to make a presenta- 


tion next month before the 


750-member Enterprise Devel- 
opers Guild in Charlotte. Marc 
Ginns, a lead application devel- 
oper at Duke, said the company 


| already has received four pages 


of suggested additions and 
changes to the framework from 


| guild members. 


Bill Jones Jr., president of 
the guild and a software archi- 


| tect at Charlotte-based Meta- 


Logix Inc., said a group of de- 


| velopers in the local Microsoft 
| community are excited about 


the Duke project’s potential to 


increase productivity. He said 


the “reference architecture” 


| will let the developers focus 


on business logic instead of 
low-level plumbing. 
“They’ve put together sev- 


| eral key components common 
| to most projects, whether Web 
| or Windows,” Jones said about 
| Duke. “They worked out the 

| architecture and thought 


through how things should 


but they’ve solved a lot of the 
big ones.” @ 48960 
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Microsoft Delays 
SP2 Updates . . . 


Microsoft Corp. postponed the 
start of automatic distribution of 
Windows XP Service Pack 2 to 
corporate users after IT managers 
told the vendor that they needed 


more time to configure systems to | 


block the update. Many compa- 
nies, including IBM, want to delay 
installations of SP2 until they can 
test its compatibility with their 
applications [QuickLink 48777]. 
Microsoft pushed back the launch 
of automated SP2 updates for 
Windows XP Professional from 
Aug. 16 to this Wednesday. 


... And Discloses 
Possible App Issues 


Microsoft has also published a list | 


of nearly 50 applications and 
games that may not work properly 


after users install SP2. The list in- | 


cludes Microsoft products such 
as Systems Management Server 


2003, plus software from Syman- | 


tec Corp., Macromedia Inc. and 
Computer Associates International 


Inc. The conflicts involve a firewall | 


built into SP2, Microsoft said. 


CA Buys PestPatrol 
To Target Spyware 


Computer Associates said it 

has acquired PestPatrol Inc., a 
Carlisle, Pa.-based developer of 
antispyware software, for an 
undisclosed price. CA plans to in- 
corporate PestPatrol’s products 
into its eTrust Threat Manage- 
ment software suite, which in- 
cludes tools designed to protect 
corporate networks against virus- 


es, spam and inappropriate use of | 


the Web by employees. 


McAfee to Acquire 
IT Security Vendor 


in another security-related acqui- 
sition, McAfee Inc. in Santa Clara, 
Calif., said it’s buying Foundstone 
Inc. for $86 million in cash. Mis- 


sion Viejo, Calif.-based Foundstone | 


sells software for detecting and re- 
mediating software vulnerabilities. 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY GOSSIP BY MARK HALL 


Remote App Testing 
Comes Home. . . 


. .. for Starwood Hotels and Resorts Worldwide Inc., which 
is in the first phase of automating software testing 
for remote users of its homegrown and commercial 
applications. According to Mark Badeau, manager 
for enterprise QA, his quality assurance team was 
“challenged by the testing environment.” That’s an 


understatement. Software | 
that was created or integrat- | 
ed centrally at the White 
Plains, N.Y.-based company | 
often was destined to oper- | 
ate remotely at one of the | 
750 properties in 80 coun- 
tries that Starwood manages. 
Getting the end users to put 
the programs through their 
paces without major logistics 
hassles was a pain. Enter 
Austin-based Surgient Inc. 
Its VQMS technology lets re- | 
mote users access and work 
with an application through 
a browser as if the code were 
running locally. Pam Thorn- 
ton, Starwood’s director of 
software engineering, says 
she “was comfortable work- 
ing with a young company 
because they had seasoned 
folks who understood and 
leveraged best practices for 
testing.” In addition to the 
remote user access, Badeau 
praises VQMS because it lets 
him provision a test machine 
and lock it down, run the 
tests and then automatically 


reset the system for the next 
operation. Reconfiguring and 
preparing a computer for a 
test once took hours but now 
takes just a moment or two, 
he says. Surgient CEO Bill 


| Daniel says that later this 
| year or early next, Starwood 


and others can use an up- 


| graded VQMS with out-of- 


the-box integration with test- 


| ing tools from Seque Soft- 
| ware Inc., IBM’s Rational di- 


vision and Mercury Interac- 


| tive Corp. Pricing starts at 
| around $25,000. But think 
| of the money you save by 


not having to reprovision 
machines for every test. 
And those hotel bills from 


| end users visiting the testing 


center will disappear. 


| Apple’s Resurgence in 


Life Sciences May... 
. .. polish its image for Wall 
Street IT users. That’s a sce- 


| nario painted by Jeff Augen, 


CEO of TurboWorx Inc. in 
Shelton, Conn. He contends 


| that Apple Computer Inc.’s 








| high-end 


Macs have “a 
technological 
head start” 
over Intel- 
based ma- 
chines be- 
cause they’re 
fully 64-bit 
and “really, 
really fast.” 
That head 
start appeals to organizations 
that demand high-perfor- 
mance, clustered systems. In 


CS Sarl) 
on Wall Street. 


| the life sciences market, Au- 


gen foresees clusters of Macs 
(and Linux systems) using his 
company’s TurboWorx Enter- 
prise technology displacing 
multiprocessor Unix servers 
from Sun Microsystems Inc. 
and IBM. Michael Swenson, 
an analyst at Life Sciences In- 
sights, an IDC company in 
Framingham, Mass., agrees. 
“We see an uptick in interest 
in Apple” among life sciences 
users, he says. But Augen 
thinks Apple might leverage 


| 
one success for another. He 


claims that financial services 
companies with high-perfor- 


| mance computing needs are 
| showing serious interest in 


TurboWorx Enterprise to de- 
ploy and manage CPU-cycle- 
sucking applications — even 
on clustered Macs with the 


| Unix-based OS X operating 


system. That doesn’t surprise 


| Tom Barton. He’s the CEO of 
| Rackable Systems Inc. in Mil- 


pitas, Calif., whose clustered, 


| high-performance 


computers appeal 


| to the technically 


sophisticated 
users on Wall 


te * 
| Street. And while 
| he doesn’t have a 


deal now for Macs 
to be used in his 


| advanced low- 


power, thermal- 
managed racked 
systems, he “sees 
an opportunity to 


| cooperate with 
| Apple for the fi- 


nancial market.” 





Industrial Controls 
Meet IT... 


... in anew managed service 
from Betrusted Inc. The New 
York-based security service 
provider is teaming with 
industrial controls monitor- 
ing company Verano Inc. in 
Mansfield, Mass., to offer the 
latter’s Industrial Defender 
as a managed service. Indus- 
trial Defender is a security- 
hardened Linux appliance 
that monitors the health of 
industrial machinery such as 


| turbines. Verano CEO Brian 


Ahern says speculation about 
a “combination 9/11 plus the 
East Coast blackout is more 
than a bad dream.” He argues 
that the nation’s critical infra- 
structure suffers from “a gap 
as to who’s responsible” when 
industrial control systems can 
be sabotaged over the Inter- 
net. Is it plant operations per- 
sonnel or staff in the IT data 
center? Ahern suggests com- 
bining the roles through a 
managed security service. 
The integration of Industrial 
Defender’s data and alerts into 
Betrusted’s 10 global data cen- 
ters will be complete in Q4. 


Rackable Scales Out... 
... its server line with up to 184 
64-bit Intel CPUs in a single rack. 
Late this month, the Scale Out 
Server Series from Rackable 
Systems will add Intel Corp.’s 
Xeon 64-bit dual-processor 
chip sets to the 32-bit Xeon 
processors from Intel and 
the 64-bit Opteron 
chips from Ad- 
vanced Micro De- 
vices Inc. that are 
already available. 
Rackable’s unique 
cooling technology 
through the center 
of the rack lets you 
pack more proces- 
sors per system 
than most. Pricing 
starts at $2,800. 
© 48636 


Rackable’s 184 well- 
cooled processors 





Save over 30% with our blade bundle featuring two HP ProLiant BL20p Blade Servers, powered by Intel” Xeon™ processors, and get the 


power to make network management simple and affordable. 


HP PROLIANT BL20p BLADE 
SERVER BUNDLE 


$8,999 ssisimonin’ 


Get the HP ProLiant BL20p bundle, * (2) BL20p Blade Servers 
and you'll save big compared to | Each Blade Server includes 
the cost of buying the two servers | - (2) Intel® Xeon™ processors 3.06GHz-512k 
and accessories separately (3) 10/100/1000 NICs + (1) 10/100 iLO NIC 
aacel 1GB DDR memory 
* p-Class blade enclosure 


* p-Class single phase power enclosure 
with 2 power supplies 


* Mini bus bar kit 
* (8) Rapid Deployment Pack licenses 


Download information about HP Blade servers. 
Read a white paper highlighting total cost of ownership and the Factiva and 
iSource case studies demonstrating ROI. 
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SAP Warns Users 
About Phony Calls 


SAP AG warned users of its appli- 
cations not to provide confidential 
IT information to people who call 
them claiming to work for its 
technical support group. An SAP 
spokesman said several cus- 
tomers have received calls seek- 
ing data such as system access 
codes, on the premise that the in- 
formation was needed to correct 
IT problems. He said SAP has lit- 
tle information about the callers. 


IBM Asks Judge to 
Dismiss SCO Claim 


IBM asked a U.S. District Court 
judge in Utah to dismiss breach- 
of-contract charges that The SCO 
Group Inc. made in the Linux- 
related lawsuit it filed against 
IBM last year. Lindon, Utah-based 
SCO, which claims that IBM 
breached a Unix System V licens- 
ing deal, didn’t return calls seek- 
ing comment. In May, IBM asked 
the judge to dismiss a claim that 
it had violated Unix copyrights 
held by SCO; a decision on that 
request is still pending. 


Gartner Lowers 
PC Sales Forecast 


Gartner Inc. reduced its world- 
wide PC shipment forecast for 
this year, saying that the market 
won't grow as much as it had pre- 
dicted because of continuing eco- 
nomic concerns in the U.S. and 
other regions. Gartner now ex- 
pects shipments to increase 
12.6% year over year, down from 
its previous projection of 13.4% 
growth. Rival market research 
firm IDC said it’s still forecasting 
13.5% growth in PC shipments. 


Short Takes 


IBM said it has agreed to buy two 
Danish IT services firms as part 
of a series of deals that includes 
a 10-year IT outsourcing contract 
with Danske Bank AS in Copen- 
hagen. . . . NETSCAPE COMMUNI- 
CATIONS CORP. released Version 
7.2 of its Web browser. 
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Attorney Says Sloppy IT 
Deals All Too Common 


Final contracts often don’t include 
‘guarantees’ made during sales pitches 





BY THOMAS HOFFMAN 
NEW YORK 
osT IT contracts 
“are atrocious, 
poorly written 
and short on de- 
tails,” according to attorney 
Mark Grossman. In short, he 
said at a conference here last 
week, “they’re a breeding 
ground for litigation.” 

The breakdown in writing 
effective contracts is largely 
the fault of technology buyers, 
said Grossman, chairman of 
the technology law group at 
Becker & Poliakoff PA in Coral 
Gables, Fla. He added that IT 
and contract managers often 
fail to apply critical negotia- 
tion techniques, such as en- 
suring that system perfor- 
mance promises made by ven- 
dors in response to requests 
for proposals (RFP) are in- 
cluded in final agreements. 

Grossman led several ses- 
sions on the legal aspects of 
IT contracts at the conference, 
which was held by Share Inc., 
a Chicago-based user group 





whose membership is primari- 
ly drawn from IBM’s main- 
frame customer base. 

Part of the problem is that 
vendors’ responses to RFPs 
are usually drafted by their 
sales forces to help clinch 
deals with users, Grossman 
said. Performance and support 
guarantees offered during the 
RFP process are often omitted 
from contracts written by the 
legal staffers of vendors, he 
noted. 


Vendor Advantage 
It’s acommon occurrence, 
agreed several IT managers. 
“We do it all the time,” said 
Earl Johnson, an application 
programming manager for the 
city of Dallas, referring to the 
failure to fully incorporate 
RFP terms into contracts. The 
main reason that happens, he 
said, “is the need for expedi- 
ency and to maintain good re- 
lations with the vendor.” 
Software licensing man- 
agers and other technology 
buyers usually are less pre- 





pared for negotiations than 
vendors are, said William Sny- 
der, an analyst at Meta Group 
Inc. “If you’re in negotiations 
with a software vendor, in 75% 
of the cases, they know more 
about your company than you 
do,” Snyder said. 

Grossman said it doesn’t 


What You 
Should Do 


Conference speakers and 
attendees offered the following 
negotiating tips: 

® Align the finalization of 
contracts with the end of ven- 
dors’ fiscal quarters to get the 
best deals possible. 


= Include provisions for accep- 
tance testing to ensure that 
products meet performance and 
functionality expectations. 


& Make sure that software 
doesn’t contain intellectual 
property that’s owned by another 
vendor and isn't licensed. 


= Put in writing that source 
code must be accessible to your 
company through a source-code 
escrow firm. 


Microsoft Tries to Cozy Up to Mainframe, iSeries Users 


At the Share conference last 
week, Microsoft Corp. an- 
nounced an upgrade of its Host 
Integration Server software that’s 
designed to make it easier for 
users to link Windows systems 
with IBM's mainframes and iS- 
eries midrange servers. 

Host Integration Server 2004 
includes new Transaction Inte- 
grator development tools that are 
integrated with Microsoft's .Net 
Framework and Visual Studio 
.Net technologies. The tools can 
be used to turn mainframe and 
iSeries applications into XML- 
based Web services, said lead 
product manager Steven Martin. 

The upgrade, Microsoft's first 


in four years, is due Sept. 1 and 
will be available in both standard 
and enterprise editions. Pricing is 
$2,499 per processor for the 
standard edition and $9,999 per 
CPU for the enterprise package, 
which includes full support for 
Transaction Integrator plus a 
bridge between Microsoft's 
message-queuing software and 
IBM's WebSphere MQ product. 
Martin said about 30 users 
took part in a “high-touch” test- 
ing program while others tested 
beta versions of the upgrade. 
One of the high-touch users 
was Tom Taglianetti, a platform 
architect at Fiserv LeMans, a 
King of Prussia, Pa.-based unit of 


Fiserv Inc. that sells software for 
the automobile financing indus- 
try. “Our interest in the product is 
primarily for its application inte- 
gration capabilities with CICS 
technology,” he said, referring to 
one of IBM's transaction man- 
agement systems. 


Mainframe Data on PCs 

Total System Services Inc. 
(TSYS), which provides electron- 
ic payment processing services, 
uses Host Integration Server to 
provide up to 4,000 employees 
with access to mainframe data 
on their Windows PCs. Tim Kelly, 
director of distributed technolo- 
gies at TSYS, said the .Net inte- 








help that most companies 
begin negotiations at an im- 
mediate disadvantage because 
contract drafts are typically 
crafted by vendors, unless the 
customer is a Fortune 100 
company with considerable 
purchasing clout. 

“We've taken a different ap- 
proach,” said an IT manager 
at a major auto manufacturer 
who requested anonymity. 
Last year, his company hired 
Gartner Inc. to create a master 
service-agreement template 
that it has begun using in ne- 
gotiations with a group of four 
offshore application develop- 
ment vendors. 

“Historically, our 15 applica- 
tion development managers 
each had the authority to ne- 
gotiate such deals on their 
own,” the IT manager said. 
The master service agreement 
“should give us more unanimi- 
ty on contracts,” he added. 

But the new approach hasn’t 
been a silver bullet, the IT 
manager cautioned. Since the 
offshore vendors returned the 
contract proposals with sug- 
gested changes five months 
ago, little progress has been 
made toward finalizing the 
agreements. 

“The IT department is 
ready to go,” he said, but he 
added that a busy workload 
for the company’s contracts 
and legal team is “holding up 
the whole process.” @ 48923 


gration capabilities built into the 
new release let the Columbus, 
Ga.-based company “spoof our 
apps into thinking mainframe- 
based data is native.” 

Host Integration Server has 
been a sleeper in Microsoft's 
product line but is becoming 
more interesting with the up- 
grade, said Peter O'Kelly, an ana- 
lyst at Burton Group in Midvale, 
Utah. “The additional features 
may not be glamorous, but 
they're important,” he said. 

O'Kelly added that he expects 
“very healthy competition” be- 
tween Microsoft and IBM, which 
offers similar functionality in its 
WebSphere product line. 

~ Laura Rohde, 
IDG News Service 
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Continued from page 1 


PeopleSoft 


dor, and our business depends 
on them, but there is still a lot 
of evolution for the merged or- 
ganization that has to go on.” 
Pond is director of informa- 


tion services at Schnitzer Steel | 


Industries Inc. in Portland, 
Ore., and the new president of 
Quest International Users 
Group, an independent orga- 
nization for J.D. Edwards cus- 
tomers. He said the customer 
support and software develop- 
ment operations for the appli- 
cations he uses are running at 
about the same levels as they 
did under J.D. Edwards. 

However, like some other 
users, Pond has had to change 
sales representatives and has 
raised concerns about People- 
Soft’s software licensing poli- 
cies [QuickLink 47778]. 

Differences in corporate 
culture have also affected user 
perceptions about PeopleSoft, 
according to Pond. “J.D. Ed- 
wards was very relationship- 
oriented — almost to a fault,” 
Pond said, adding that he 
thinks PeopleSoft is more 
sales-oriented. 

“The warm, fuzzy feeling is 
gone,” said Mari Jo Moody, 
manager of customer support 
at Batesville Casket Co. in 
Batesville, Ind. She added that 
her company has lost some of 
the prominence it had with 
J.D. Edwards, which catered to 
midsize users such as Bates- 
ville Casket. “We used to have 
a close connection with J.D. 
Edwards, but now we’re no 
longer the big fish in the 
pond,” Moody said. 

Despite such comments, 
PeopleSoft sees the acquisition 
as a big success, said Ram Gup- 
ta, the vendor’s vice president 
of products and technology 
and its point man on the inte- 
gration of the two companies. 

“My experience in 16 acqui- 
sitions tells me that in 12 
months, this acquisition has 
gone absolutely pretty much 
as planned or better,” Gupta 
said. “We’ve added more prod- 
ucts, increased the research 
and development, and are get- 
ting cultural benefits from the 
companies’ similarity, and 





Users Have More Choices, Better 
Support, PeopleSoft Exec Says 


As vice president of products 
and technology at PeopleSoft, 
Ram Gupta has worked very 
closely on the integration of its 
applications and the 

software developed by 

J.D. Edwards. He spoke 

with Computerworld 

this month about the 

merger of J.D. Edwards 

into PeopleSoft. 


Do you view the merg- 

er as a success? The 

customer has more 

choice [now]. On the product 
side, we increased research and 
development in the World line by 
10%. In the second quarter, we 
got done shipping the latest re- 
lease of the EnterpriseOne fami- 
ly with 16 new products and 250 
enhancements. In the last 12 


| we’re adding better support.” 


Gupta acknowledged that 
PeopleSoft is “a more busi- 
nesslike company” than J.D. 
Edwards was. But he said that 


approach is necessary because | 
| PeopleSoft has many banks 


and other large companies in 


| its user base (see interview 
| above). 


Users said one plus is that 
PeopleSoft has upheld its com- 


| mitment to continue enhanc- 
| ing the product lines devel- 
| oped by J.D. Edwards, includ- 


ing its World green-screen ap- 
plications. PeopleSoft has re- 


| leased new versions of both 


the World software and the 
more modern J.D. Edwards 5 
applications, which are now 


| called EnterpriseOne. 


“As a World user, life is infi- 
nitely better under PeopleSoft 
than it was during the last 
days of J.D. Edwards,” said 
Dave Hyzy, director of IT at 
Benderson Development Co., 
a real estate developer in Buf- 
falo, N-Y. “World is now a vi- 
able software product again.” 

But a huge rift has devel- 
oped between Quest and Peo- 


months, we added more prod- 
ucts to EnterpriseOne than was 
done in the two years before the 
merger. We took the Total Own- 
ership Experience initia- 
tive going on in the Peo- 
pleSoft side of the house, 
and that’s available to 
J.D. Edwards customers 
in terms of better sup- 
portability and a higher 
quality of code. 
On the support side 
before, a large number of 
J.D. Edwards customers 
were on a five-day-by-eight- 
hours support model for their 
maintenance. The J.D. Edwards 
users got migrated upward to a 
seven-day-by-24-hour model. 
For the financial dimension, 
we paid $1.8 billion and still put 
$89 million in the bank [in the 


pleSoft, which decided not to 
| take part in the Lexington, Ky.- 
| based user group’s confer- 
| ences after talks between the 
| two broke down late last year. 
There also is the looming is- 
| sue of Oracle Corp.’s hostile 
| takeover bid for PeopleSoft, 
| which was launched in appar- 
| ent response to the deal with 
J.D. Edwards. PeopleSoft fell 


| short of both its initial revenue | 


| forecast and a subsequent re- 
| - 7 2 
| duced target in this year’s sec- 


| ond quarter, a showing it 
| blamed primarily on publicity 


=e December: 





da Eo 


= = PeopleSoft says it's developing unified soft- 1 user group says 

=) ware licensing and combining its sales forces. § 
= The company releases links between its 
own applications and the EnterpriseOne line. 


second quarter], and we're 
clearly the No. 2 applications 
provider after SAP. 


Some J.D. Edwards cus- 
tomers complain that they’re 
being forced to migrate to 
PeopleSoft’s licensing scheme 
or face pricing penalties. Is 
that true? You can have a value- 
based or user-based license. We 
didn’t force customers to choose 
any model. That's not the objec- 
tive, and that’s an absolutely 
documented policy. 


Another user complaint is that 
PeopleSoft is a more aggres- 
sive company than J.D. Ed- 
wards was. | think that’s an 
interesting observation, unfortu- 
nately, that leads some to decide 
that PeopleSoft is a sales and 


about the U.S. Department of 
Justice’s attempt to block Ora- 
cle’s bid. 

“Without a doubt, the world 
would have been vastly differ- 
ent for PeopleSoft without the 
Oracle [offer],” said Josh 
Greenbaum, an analyst at En- 
terprise Applications Consult- 


| ing in Berkeley, Calif. “Had 
| they been more free to operate, 


there would have been much 
more hand-holding and more 
careful attention to the details 


| that would have made the J.D. 


Edwards customers happy.” 


4 January: The Quest 


» PeopleSoft has de- 
5 cided not to sup- 
§ port its events. 


agree Be 


March: People- 
© Soft announces 
~ an upgrade of J.D. 
= Edwards’ green- 
© screen software. 


marketing machine, when we 
spend a higher amount of re- 
search and development dollars 
as a percentage of total revenue 
than Oracle or SAP, or J.D. Ed- 
wards did for that matter. 
PeopleSoft is a more busi- 
nesslike and professionally run 
company. Our customer profile 
was kind of bigger, and they 
needed a different kind of atten- 
tion when we visited them: Wall 
Street or banking ClOs wanted 
people in suits and ties. J.D. Ed- 
wards had smaller customers - a 
$200 million manufacturing 
plant in Idaho, for example. 


PeopleSoft had a bad quarter. 
Is Oracle’s takeover bid delay- 
ing purchases? Yes, it does 
make selling a little more chal- 
lenging, as in the last quarter, 
but look at the numbers: We 
signed 160 new customers in the 
last quarter. | find that outstand- 
ing for a sales organization in 
such a tough environment. 

- Marc L. Songini 


PeopleSoft has shown 
promise but remains on “pro- 
bation,” said David Hilmer, di- 
rector of IT at GrafTech Inter- 
national Ltd. in Wilmington, 
Del. Hilmer will be paying 
close attention to PeopleSoft 
at its Connect 2004 user con- 
ference next month in San 
Francisco. “I’m still watching 
to be sure I’m serviced and 
supported as a customer and 
have the commitment from 
this company like I had from 


| J.D. Edwards,” he said. 


@ 48945 


defect to PeopleSoft's 
>, user organizations. 


July: PeopleSoft 

reports Q2 revenue 
® shortfall, blames 
§ fallout from Ora- 

cle’s takeover bid. 
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MARYFRAN JOHNSON 


Checklist for Success 


CIO FRIEND OF MINE once confessed, 
somewhat sheepishly, that he simply 
can’t resist a good checklist. Whenever 
and wherever he comes across a num- 
bered list of any kind (a lineup of check 
boxes is a particular thrill), he has to stop and read 
it. Tips, tactics, random advice — almost any top 10 
list is grist for his mental mill. “Most of the time I 
know all the stuff on the list; often it’s just common 
sense,” he admits. “But every now and then I finda 


really great idea.” 


I was thinking of that 
list-hungry CIO as I 
looked over our “IT Sur- 
vival Guide” (page 30, 
and online at QuickLink 
48479). It’s not a compli- 
cated or daunting list by 
any means, coming as it 
does from that cheerful 
guy holding the shovel, 

Ace Hardware CIO Paul 
Ingevaldson. What’s his 

claim to fame? He not 

only lasted at Ace for 25 

years (“a long time in this day and 
age of the portable CIO,” he notes); 
he also logged four decades in IT. 
Imagine being able to boil down 40 
years of IT experience to 10 core 
pieces of advice. 

But no matter how fine a list it is, 
you won’t remember 10 things. So 
I’ve boiled them down further into 
three enduring truths about IT and 
business. Almost any list you'll ever 
encounter about IT management 
could be parsed into the following 
mantras: 

1. Whatever connects IT more closely to 
the business is worth doing. The first 
piece of advice Ingevaldson offers is 
to get out of the IT department and 
work in a business unit, a recom- 
mendation I’ve heard echoed by so 
many management consultants that 
I’ve lost count. But coming from a 
CIO (and one who’s rooting for you 
to return to IT), it carries substan- 
tially more weight. 





He also stresses the im- 
portance of grasping the 
corporate business strate- 
gy and then mobilizing IT 
to support it. Not just im- 
plementing a strategy, he 
warns, but getting IT in- 
volved as part of the proc- 
ess. And to all those com- 
panies trying to charge 
out IT as a business-unit 
expense, this veteran CIO 
says to cut it out. “Oper- 
ate it as an expense cen- 

ter,” he recommends, explaining that 
if top business execs are part of the 


| prioritizing process, they’ll know 
| that IT is “working on the important 


| applications.” Operating IT as a utili- 
| ty means it will never be strategic. 

2. Whatever improves communication 
about IT is worth repeating. (Read that 
| again.) This is one of the toughest 
sells to introverted IT folks because 
it entails talking up (a.k.a., market- 
ing) the value of IT to end users. 
And that means actually speaking to 
those people. “Don’t keep IT in the 
closet,” Ingevaldson says. “Spread 
the word, create excitement and con- 
vince people to get on the IT band- 
wagon.” (There’s got to be at least 
one extrovert in your IT department, 
right? Put her to work.) 

3. Whatever encourages good IT man- 
agement practices is worth trying. Using a 
hands-off management style with 
smart, motivated staffers (“Get out of 
their way”) is another of Ingevald- 
son’s tips, alongside classics like 
learning to delegate and setting high 
expectations for meeting project 
dates and budgets. “Missed deadlines 
and busted budgets are the things 
that give IT a bad name,” he notes. 

Of course, after 40 years of dealing 
with end users, this CIO knows there 
will be simply god-awful days when 
none of his management mantras 
will help. That’s when he gets really 
sensible: “Tough days are why they 
| invented single malts.” @ 48927 
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BECAUSE WE COULDN'T FIT 


OUR SUPPLY CHAIN SYSTEM 
INTO A GUILLOTINE. 
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VIRGINIA ROBBINS 


Not All 
Employers 
Play Fair 


ECENTLY, my extend- 

ed family joined me 

for an all-too-brief 
summer get-together in San 
Francisco. On one particularly 
foggy day, Samantha, my 12- 


year-old niece, turned to her 20-year- 
old cousin, Matthew, and announced 
that while they were waiting for lunch 
they would play keep-away. Speaking 
with a great deal of authority, Saman- 
tha announced the rules that would 
make the game fair. Six-foot-three 
Matthew would need to sit on the car- 
pet in the middle of the room, while 
she would go to the other end of the 
room and kneel. Kathryn, age 6, would 
stand by the door with plenty of room 
to throw, and Ashley, 

4, would sit in the 

big chair by the door 

and catch. Matthew, 

having met his equal 

in the world of keep- 

away, agreed. Saman- 

tha began by tossing 

the green Nerf ball 

over Matthew’s head 

to her sisters, and 

the girls managed to 

keep the ball away 

from him until the 

PB&J and chocolate 

milk were ready. 

As I prepared the sandwiches in the 
next room, I couldn’t help but think 
about Samantha’s view of fairness. The 
game was clearly equalized, with tall, 
skinny Matthew, seat plastered to the 
carpet, straining to reach the ball. I was 
impressed with Samantha’s ability to 
command a room and keep the game 
fun for her little sisters. And I had to 
smile, since as an adult I know that life 
isn’t fair, no matter how well we com- 
mand the room. 

When it comes to outsourcing, 
whether that involves shipping work 
elsewhere in the U.S. or overseas, the 
employers that we choose to work for 
don’t always seem to play fair. Of 
course, what’s fair to you may not be 
fair to me, so to illustrate what I think 
is fair, I will use words that rely ona 
time-based viewpoint. I will define fair 
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as a balanced, long-term perspective, 
and unfair as a short-term, less-bal- 
anced perspective. 

Short-term companies are those that 
focus on how much money can be 
made as soon as possible. In the most 
extreme cases, short-term companies 
are only about today’s cash position. 
For these companies, outsourcing, es- 
pecially overseas outsourcing, isn’t an 
investment — it’s a way to cut costs to- 
day. For employees working in these 
companies, it’s sometimes frightening- 
ly obvious that domestic workers are 
an undesired expense. 

Other companies have a long-term 
perspective and see costs, including 
employee costs, as an investment. 
These companies may still choose to 
outsource, but if they do, they’ll struc- 
ture the work and the agreements to 
reflect a long-term strategy, developing 
disciplined processes over time that 
change in response to their experi- 
ences. If you’ve worked only in short- 
term companies and are curious as to 
what attributes a long-term company 
displays, read Jim Collins’ books Good 
to Great and Built to Last. 

Some believe that short-term think- 
ing is what capitalism is all about. As 
an economist, I don’t agree. A free 
market allows companies to look to the 
short term and to profit or not accord- 
ingly. It also allows those that look to 
the long term to profit or not as well. 
It’s fabulous that we live in a country 
that allows companies and employees 
to choose, and then to act accordingly. 
Life isn’t fair, but that doesn’t mean 
you need to work for someone focused 
only on the short term. @ 48832 


DAVID MOSCHELLA 
Keeping Up 
With Your IT 
Consumers 


O THE EMPLOYEES 

in your organization 

ever complain that they 
have better technology at 
home than in the office? Do 
you require them to access 
corporate systems via a dedicated PC 
as opposed to any Internet-connected 
browser? Do they ever use their per- 
sonal Internet e-mail accounts for 
business and laugh at the limitations of 
Microsoft Exchange or Lotus Notes? 
Do they sometimes shake their heads 


_ OPINION 


wondering why, if they can 
set up a wireless LAN at 
home in a few hours, corpo- 
rate IT says wireless sys- 
tems in the office are too 
complex and risky? 

While IT professionals 


| can often give perfectly 


valid answers to these and 
similar questions, you know 
before you give them that 


| they will mostly fall on deaf 


ears. The reality is that em- 
ployee expectations of IT 
are now being shaped out- 
side of the workplace. It’s all 
part of the increasing con- 
sumerization of corporate IT. 

Consumerization is happening in 
two main ways. First, many employees 
are now active consumers of IT. 
They’re becoming increasingly famil- 
iar with broadband, multimedia appli- 
cations, wireless systems, digital cam- 
eras, smart phones and browser-based 
computing. They’re also becoming 
increasingly intolerant of workplaces 
that still treat them as passive users. 
Moreover, the laptops and mobile 
phones they carry are almost always 
dual-purpose devices used extensively 
for both business and personal appli- 
cations. 

The ramifications of this are now 
becoming clear. IT departments have 





become accustomed to 
treating employees like 
children who must be told 
what they can and cannot 
do. But many employees 
want to be treated like con- 
sumers, given choice and 
flexibility in their use of IT. 
If they are going to work at 
home and lug around dual- 
use work/personal devices, 
these devices will have to 
meet their personal stan- 
dards, not just for func- 
tionality but increasingly 
for style and fashion as 
well. Requiring every em- 


| ployee to accept the same generic IT 


capabilities will become almost as ab- 
surd as requiring that every employee 
drive the same car. 

The second aspect of consumeriza- 
tion will in the long run prove even 
more important and disruptive. In- 
creasingly, the public infrastructures 
that are emerging to support con- 
sumers will be fundamentally better 
than the private infrastructures that 
companies have traditionally built for 


| themselves. 
Just look at the price/performance of | 


today’s consumer-oriented Wi-Fi, 
videoconferencing, storage, messaging, 
Internet telephony and broadband ser- 
vices. While Google’s advertising- 
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based plan to give consumers a free 
gigabyte of e-mail storage won’t be 
for everyone, it is certainly indicative 
of the enormous service improvements 
to come. 

Similarly, while large enterprises 
have generally looked askance at the 


| idea of utility computing, the reality is 


that this is the way most of the market 


| already works. Consumers and many 
| small businesses already buy their net- 
| working, storage, hosting and telepho- 


ny capacity by the month, based on 


| what sort of service requirements they 


expect to have. They don’t build infra- 


| structure; they simply use it. 


Therefore, the big question is 


| whether large organizations will con- 


tinue to have their own unique style of 


| computing, with a heavy emphasis on 
| their own private infrastructures and 
| the rules needed to support them, or 
| whether at some point consumer and 
| business computing will effectively 

| merge, with everyone increasingly 


sharing a common public infrastruc- 


| ture. That’s the long-term promise of 
| consumerization, and although it’s still 


a long way off, that’s the direction the 
market is moving in. @ 48846 
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Doomed Projects 
Are Nothing New 


AWN! Another iT project de- 
layed or doomed [“Australian 
Firm Wrestles With ERP Delays, 


$11.5M Overrun,” QuickLink 48068]. | 
| but also the impacts on other areas. 
| They consider constraints such as 


“Dog bites man” would be a more 
newsworthy story. If there were 
fraud or other malfeasance, there 
might be some reason to run a small 
piece on this. But if this is just anoth- 


er level-zero customer dealing with a | 


level-zero contractor bumbling along 
and hoping to eventually hack to- 
gether some software system, why 
bother killing a tree for it? What the 


told is the root cause of this problem 
In the same issue, the story “IT 
Governance Is on the Hot Seat” 
[QuickLink 48025] echoes the 
same problem. Portfolio manage- 
ment is routine in well-run compa- 
nies. It is just an extension of proj- 
ect/program management, and un- 
less the company is exceptionally 
large, there should be no need for a 





separate committee. In a truly large 
company, an integrated product 
team, or IPT, as these committees 


| are commonly called, would be a 


routine part of normal decision 
processes. Such teams consider 
not only the cost and value added 


budgets and delays to other proj- 
ects if shared resources are divert- 
ed. In short, they make decisions 
that will optimize the enterprise 
within the real-world constraints of 
time and budget. 


| William Adams 
| Consultant, Springfield, Va. 
readers of Computerworldshould be | 


Waiting for What’s 
Next in E-mail 
ARK HALL’S COLUMN “The 


End of E-mail” [QuickLink 
47526] was intelligent, factual, 


| readable and made complete sense. | 
| Hall will be attacked by the techies, 


but they're no different from the 
people who said that the Pony 





Express was the greatest com- 


| munication tool that would ever be 


developed. 

Andrew H. Clson 

Managing director, 

TEAM International Group, 


| Gainesville, Fla. 


KEPT WAITING for the punch line 

in Mark Hall's column, but | was 
left high and dry. What is going to 
replace e-mail? Of course messag- 
ing will evolve, as it has from news- 


it will evolve because of spam and 


| viruses. It will evolve because a new 


alternative will be easier, more reli- 


| able and more flexible. 


It's true that handhelds don't 


have the problems commonplace in | 


e-mail, but those problems arose 


| only when usage levels made it 


worthwhile for spammers. When 
handhelds catch up, you can be 
sure that the spam marketers and 
virus aficionados will reset their 
sights on that next-generation mass 
platform. That is also a natural evo- 


lution. For handhelds (or whatever 
the next generation is) to catch up, 


| their architectures will have to be- 

| come more open to enable third- 

| party development to provide appli- 
cations, data/information and other 


integration, and those are the same 


| tools that enable spammers and 

| hackers to thrive. And then the cycle 
| will begin again! 

| Dan Leichtenschlag 

| CTO, Diets.com, 

Deerfield Beach, Fla. 

groups to e-mail. But | disagree that | 
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Visual Studio .NET 2003 significantly 
reduces the amount of code you 
need to write, freeing you up to 
think big thoughts. 


Think big. Visual Studio” .NET 2003 
delivers higher productivity by taking 
care of the small stuff, so you can 
concentrate on bigger things. Just ask 
HP. “On our consumer application 
project Visual Studio .NET really lowered 
the technical barriers to doing great 
work,” says an HP Technical Lead. “We 
developed the application faster than 
we could have with other technologies 
due to the better tool set capabilities 
To find out how Visual Studio .NET 2003 
can help you concentrate on big ideas, 
visit msdn.microsoft.com/visual/think 
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Visual Studio 
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FUTURE WATCH 
Software Flight Plan 


Paul D. Nielsen, the new CEO of Carnegie 
Melon’s Software Engineering Institute, ex- 
plains how his experience running a $3 billion 
military research lab will help the university 
develop commercial applications. Page 24 


OPINION 

Here’s to Your 

(Electronic) Health 

The U.S. Health and Human Services depart- 
ment’s initiative to consolidate Americans’ elec- 
tronic health records is a worthy cause — and a 
daunting project, says Tommy Peterson. Page 26 


08.23.04 


SECURITY MANAGER’S JOURNAL 
Antivirus Service 

Troubled by TLS 

A new antivirus service runs afoul 
of Roger Foix’s all-too-complicated 
Transport Layer Security e-mail 
encryption configuration. Page 25 


nbounded by the physical constraints 

of cabling and walls, wireless LANs 

have proved tricky to secure. Now that 

the long-awaited 802.1li standard for 

enhanced WLAN security has been 
ratified, can IT assume that WLANs have grown as 
secure as their cabled counterparts? 

Hardly. 

It will take time for vendors to migrate their prod- 
ucts to 802.1li, approved in June, and for IT organiza- 
tions to adopt them. And the Wi-Fi Alliance won't 
even start interoperability testing of 802.1li products 
until next month. 

More important, 802.lli represents just the finish- 
ing touch to a series of steps in wireless security 
standards development. Much of it has already been 
available for about 18 months in an 802.1li subset 
called Wi-Fi Protected Access (WPA). And while 
standards-based security technology plays a big part 
in protecting enterprises, the issues reach beyond a 
signed set of technical specs. 

For example, there’s a broad installed base of spe- 
cialized client devices, such as bar code scanners, 
that run the MS-DOS operating system. They are not 
upgradable, even to earlier versions of authentica- 
tion and encryption, let alone to 802.1li, which re- 
quires Advanced Encryption Standard protection. 
AES will require hardware upgrades — even for 
far newer products. As enterprises expand their 
WLANs, these legacy devices might well become 
the weakest link in the wireless security chain. 

And some administrators lack confidence in their 
ability to properly implement the various pieces of 
WLAN security, particularly since new attacks regu- 
larly make headlines. 

Asserts Pete Davis, assistant network engineer 
for the Spring Independent School District in Spring, 
Texas, “It requires much time and effort to deter- 
mine what’s real and what’s market-speak. There’s 
a lot of FUD [fear, uncertainty and doubt] being 
spread about wireless security.” 


Technology Headway 

The formal 802.1li standard, which includes WPA, 
does bolster the confidentiality and integrity of 
WLANs. Tom Hagin, vice president of the wireless 
business practice at integrator NetXperts Inc. in 
San Ramon, Calif., says the standard has taken Wi-Fi 
security “from prepuberty to just past puberty.” 

“In the past six months, we haven’t had anyone say 
they weren’t going to instali wireless because it isn’t 
secure. Prior to that, we did,” he says. 

WPA, available in many WLAN network interface 
cards (NIC) and access points (AP), was developed 


The new 802.11 wireless LAN security standard is a step eimaueas 
but Wi-Fi LANs still aren’t impervious to attacks. BY JOANIE WEXLER 
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after university researchers demonstrated the ease 
with which hackers could break static encryption keys 
in the 802.11’s Wired Equivalent Privacy (WEP) mech- 
anism in 2001. WPA requires products to rotate en- 
cryption keys on a per-packet basis so they are much 
harder to crack. WPA also uses the industry-standard 
802.1x framework for strong user authentication. 

And AES, the U.S. government block-cipher stan- 
dard for 128-bit data encryption, replaces the RC4 
stream-cipher encryption that WEP and WPA use. 

Still, “WPA will be good for three to five years 
before those smart kids who broke WEP break RC4. 
Then everyone will need AES,” says Michael Disaba- 
to, an analyst at Burton Group in Midvale, Utah. 
802.1li also specifies a way to achieve fast secure 
handoffs among APs (in the 25-msec range) and a 
simpler authentication scheme for small WLANs. 


Practical Limits 


But technology can solve only so much. Through 
2006, 70% of successful Wi-Fi attacks will occur as a 
result of the misconfiguration of APs and client soft- 
ware, according to Gartner Inc. 

This is why the Bethesda, Md.-based SANS Insti- 
tute, which offers information security training and 
certification, recommends regular wireless audits. 
“AES is great,” says Joshua Wright, deputy director 
of training. “But if people don’t audit their networks, 
they might not know that a misconfigured AP isn’t 
using it. This is low-hanging fruit for attackers.” 

Conducting audits requires tasks both on the 
wired and wireless sides of the network. First, says 
Wright, administrators should regularly download 
each AP’s configuration and make sure it accurately 
reflects the organization’s internal security policies. 

For example, if an enterprise has adopted 802.1x 


and has selected Protected Extensible Authentication | 


Protocol, one of several available authentication 
methods, network administrators should regularly 
check that all APs are indeed configured for PEAP. 

In addition, airborne packets should be regularly 
examined using a wireless protocol analyzer to verify 
that they are actually using the EAP method selected. 
“Sometimes settings on APs have not been applied 
and do not kick in,” Wright says. 

Another recommended practice is treating the 
WLAN as an untrusted network, like the Internet, 
and putting a firewall or gateway where wireless and 
wired networks meet. Though this is a well-estab- 
lished guideline, “a lot of companies don’t do it,” 
observes Davis. 

The Spring school district, however, has deployed 
the internal firewalling capabilities in Aruba Wire- 
less Networks Inc.'s WLAN switches. 

“We have an apartment complex behind us, and 
outsiders could poach on our Internet connection 
{without the firewall],” Davis notes. “Our district 
could be held accountable if they did nefarious 
things using our source network address.” 

Davis says the setup also lets him use an access 
control list to determine which network resources 
are available to each user in the 26,700-student, 25- 
school district. Wireless gateways from companies 
such as Bluesocket Inc. and Vernier Networks Inc. 
provide similar access control list functions. 

It is not obvious to all network implementers how 
to glue the many available security mechanisms to- 








THREATS 
TO WATCH 


Even with the range of WLAN security 
technologies available today, risks remain. 
Beware of these three threats: 


IDENTIFY THEFT 

@ Merwyn Andrade, a contributor to the 802.11i 
security specification and chief technical offi- 
cer at Aruba Wireless Networks, warns that 
identity theft could become a problem for en- 
terprises using WLANs. For example, users 
with 802.11i wireless phones might save their 
passwords and PINs on the phone for conve- 
nience. “This would be like keeping your keys 
to your house in your wallet and then losing the 
wallet,” he says. “Once 802.11 is pervasive, 
people might miss that they have to worry 
about authentication.” 


DEAUTHENTICATE DENIAL- 
OF-SERVICE (DOS) ATTACKS 

@ Tools like Voidtl software can flood a client 
with deauthentication packets, in effect telling 
clients that there are too many users associat- 
ing with an AP and to seek another one. Re- 
peated flooding of such legitimate 802.11 mes- 
sages could sustain a DoS attack on clients 
indefinitely. 


MESSAGE INTEGRITY CHECK 
(MIC) DoS ATTACKS 

@|nthe 802.11i specification, the MIC protocol 
compares MAC headers when transmitted and 
when received. If they differ, they are deemed 
spoofed, so the packet is dropped. However, if 
this happens twice within a minute, the WLAN 
AP tells the entire network to log off and stop 
accepting traffic for a minute. Repeated double 
MIC changes could result in prolonged DoS 
attacks. 


gether. “Wi-Fi security is not something that you can 
set and forget,” says Boris Shubin, director of IT at 
Dunkin’ Donuts Inc., which recently deployed a 
wireless speech-recognition-based picking system in 
its Swedesboro, N,J., warehouse using centralized 
WLAN switches from Airespace inc. “APs ship wide 
open. WLAN security is iffy; it’s a very high-touch 
standard.” 

Dunkin’ Donuts uses media access control address 
filtering to keep suspicious packets off its network. 
If a MAC client source address isn’t on an approved 
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list in the switch, it isn’t allowed access. 

Disabato says MAC filtering works but isn’t scal- 
able. “You have to change your system if a card 
breaks. If a guest leaves, you have to remember to 
remove their MAC address,” he says. Such labor- 
intensive approaches tend to be less secure simply 
because they are error-prone. 

Even the world’s largest WLAN operator — Micro- 
soft Corp. — isn’t using WPA yet on its 4,500-AP 
WLAN, built on APs from Cisco Systems Inc. Many 
of Microsoft’s older APs are first-generation technol- 
ogy and are not WPA-capable. 

Microsoft is poised to make a wholesale change to 
its global WLAN infrastructure, which supports 
about 100,000 unique mobile devices. “Ili is our main 
goal, but we can’t move to it yet because no NICs 
support it,” says Don Berry, the wireless network en- 
gineer who has overseen Microsoft’s global WLAN 
implementation since 1999, 

“We're assessing what the various EAP security 
strengths are,” he says. “What will it take to live 
day to day using a particular method? How many 
servers would each type require? What’s the security 
strength of each?” 


Which EAP? 


Most enterprises will select an EAP authentication 
method based on the type of database they have, says 
Dave Halasz, who chaired the 802.lli Task Group and 
is manager of software systems in Cisco’s wireless 
networking business unit. “If you don’t already have 
a certificate database for authenticating users, you 
might not put one in just for wireless,” he says. 

In fact, notes Kevin Tseng, senior wireless engi- 
neer at NetVersant Solutions, a systems integrator in 
Seattle, “most companies do not run a public-key in- 
frastructure,” which is required for using EAP meth- 
ods that use client- and server-side certificates, such 
as EAP-Transport Layer Security. 

Cisco’s broadly deployed Lightweight EAP 
supports easier-to-manage username/password 
schemes but is prone to off-line dictionary attacks 


| in shops that can’t enforce strong password policies. 


LEAP also supports mutual authentication, an 
802.1li recommendation, as do PEAP and another 
common method, EAP-Tunneled Transport Layer 
Security. 

“But these are mostly supported in smart clients 
such as laptops,” says Tseng. “Scanners for tracking 
inventory don’t support them.” He estimates that 
less than 30% of devices in the field are outfitted 
with mutual authentication today, leaving many 
deployments exposed. 

Still, WLAN security has come a long way, says 
Disabato. “Two years ago, people who hadn’t been 
antenna-heads for very long didn’t even understand 
that walls don’t stop signals. Now that people are 
thinking of networks radiating in a 360-degree 
sphere, they’re doing much better.” @ 48342 





Wexler is a freelance writer in Silicon Valley. Contact 
her at joanie@jwexler.com. 
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If you’re an IT executive* in an end-user 
organization, apply to attend Computerworld’s 
upcoming complimentary half-day summit 
on 


ClOs and senior IT executives are finding 

that consolidating high-performance networks 
can play a key role in improving business 
application performance while significantly 
reducing operational costs. 


The proliferation of network capacity and 
related storage and server infrastructure 
presents a daunting challenge for today’s 
enterprises, many of which are positioning 
themselves for growth yet still seeking to 
reduce IT costs where feasible. 


By leveraging the knowledge of industry 
experts and the real-world experience and 
advice of your IT peers, this IT Executive 
Summit will provide an overview of effective 
strategies for consolidating and connecting 
networks and data center applications. 


*Complimentary registration is restricted to 
qualified IT executives only. 


Apply for registration today 
For more information or to apply, visit 
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IKE LUCAS, IT director at 

Hogan & Hartson LLP, had 

had enough. The Washing- 

ton-based law firm was 

paying $30,000 a month to 
back up data on more than 400 servers 
located in 27 offices worldwide and 
store the tapes off-site. Lucas says he 
couldn’t stomach the cost of buying 
more tape drives to back up every new 
print, file or application server. 

Along with the increasing costs, the 
tape-based infrastructure created ad- 
ministration issues, including the need 
to sometimes rely on nontechnical 
staffers to swap out tape cartridges in 
each remote office every night and 
take them off-site. 

Then there were the software glitch- 
es. “We'd have trouble from time to 
time with a tape getting hung, having 
to do a reboot of a server during off 
hours. We were at risk of not having a 
backup,” Lucas says, adding that re- 
trieving tapes for restoring data in an 
emergency could take more than a day. 

Data protection executed at remote 
sites is often a hit-or-miss scenario 
because “no one knows if the backup 
actually happened or if a restore can 
occur,” says Arun Taneja, an analyst at 
Taneja Group Inc. in Hopkinton, Mass. 


_TECHNOLOGY 


Those frustrations led Lucas to use 
a remote backup strategy that brings 


| backup data into the data center, where 


it can be centrally managed. Vendors 
offer a variety of network-based 


| schemes that pull data across a WAN 


to a central repository. These systems 
are simpler to manage and more cost- 


| effective than local tape backups, ana- 


lysts say. 

Most include software and appli- 
ances that replicate data from branch 
offices to the data center, where it is 
backed up to a disk device and/or tape 
library. This model eliminates the need 
for media handling or IT support at re- 
mote sites and offers greater security, 
since backup data is centralized. 

The increasing popularity of these 
systems is starting to affect sales of 
entry-level tape drives commonly used 
to back up direct-attached storage. 
IDC in Framingham, Mass., is forecast- 
ing a 20% decline this year as adminis- 
trators increasingly decide not to back 
up branch servers locally. 


| The Options 


Vendors offer several approaches to 
remote backup. Software such as 
Veritas Software Corp.’s Storage Repli- 
cator and CYA Technologies Inc.’s 


BACKING 


THE 
EDGE 


Thanks to remote data replication and 
disk-based backup technologies, the data 
center is reasserting control over branch- 
office backups. BY LUCAS MEARIAN 





| HotBackup first execute a complete 


backup of direct-attached storage on 
each remote server or network-at- 
tached storage appliance and then 
move incremental or “delta” changes 


| over the WAN to the data center. 


Some organizations with branch of- 
fices that host multiple servers are 


choosing to first consolidate backups 


to a local disk-backup appliance before 
replicating data across the WAN. The 


appliance can complete server backups 
| quickly across a LAN and then stream 


updates over the slower WAN connec- 
tion to the data center, where it can be 


| archived to tape. 


For workstation backups, some 


| storage administrators are creating 


virtual drives on remote end-user PCs 
and mapping those to a file server 
back in the data center. To avoid per- 
formance problems over the WAN, 
administrators install a local data- 
caching appliance that gives users 
access to their files at LAN speeds 
while updates stream in the back- 
ground to the back-end appliance in 
the data center. 

Lucas contracted with DS3 Data 
Vaulting LLC, a service provider in 
Fairfax, Va., for his network backup 


| system, which includes disk-based ap- 





www.computerworld.com 


PSM CMe (oe 
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removing tape drives from branch of- 
fices and consolidating them in the 
CEE mee 


™ Afford greater security by centraliz- 
me eL Cn mere e 


® Eliminate need for branch office staff 
CHM MLCT Malet cees Te] 
as tape rotations. 


Experience problems 
with replication through- 
put if WAN bandwidth is insufficient. 


mcr Lee an Le meU le (Lat) 
complexity to the backup process. 


Mem een MUN (et CL mS oe 
ware and possibly hardware as well, 
depending on the system chosen. 


pliances and software from Asigra Inc. 
in Toronto. Asigra’s Televaulting 


| DS-Client software runs on servers, 


desktops and laptops connected to 


| each remote office LAN and automates 


the backup of about 3TB of com- 
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Grande Lakes Resort 
Orlando, Florida 


Please affix your business card to this space prior to Registration questions? 
submitting your application. Applications submitted 


without business cards will-not be processed. 


Questions? Call 1-800-883-9090 


Need accommodations? 
www.etcentral.com 


Please check ONE of the following: 
(.] | am an IT End-User* 


CL) | am a Channel Partner/ 


Earlybird Registration 


A $895 


(Complete Attendee Profile below) 
O $1,290 


UY $3,000 


Full/Onsite Registration 


4 $1,295 


U $1,690 


4 $3,300 


Integrator/Consultant 
(Complete Attendee Profile below) 


Attendee Profile: 


Your Business/industry that best describes your involvement in t 
3 rocess 
4 ! E ¢ alue of IT prod 

, e mend/influence for 


Annual company IT budget (storage products and services) 


4 


CULLLELLLLLLLLLLLLELL 


Would you like to receive information about playing in 
the golf outing on Monday, October 25th? 
4 


LLLLL eS 


u 


(-] My company is Sponsoring/ =| 4 $295 Q $1,295 


Exhibiting at SNW 


O $1,290 $1,690 


(_} | am a representative of a Non-Sponsoring IT Vendor Company 
O $5,000 Business Development Professional Package 


Payment Method 
— Check 
C) | am a Financial/Equity Analyst and/or Venture Capital Professional 


— American Express 1 VISA —) MasterCard 
O $1,290 4 $1,690 . ” 


L) | am a qualified member of the press. 


Cancellation Policy written notification 


Please fax this completed application 
to 1-508-820-8254 
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pressed data from local backup appli- 
ances in 10 offices over the WAN to an 
AT&T data center. 

After completing an initial full back- 
up, the remote appliance provides up- 
dates only for changed data blocks. It 
eliminates duplicate files, encrypts the 
data and compresses it at a 2-1 ratio be- 
fore automatically sending it across 
the WAN on a scheduled basis. 

Lucas expects a two-year payback 
on his investment. The initial system 
installation in Hogan & Hartson’s cen- 
tral office cost about $13,000. He has 
deployed 10 offices to date and is con- 
tinuing to roll out the technology. 


Caching Up 

Companies such as Actona Technolo- 
gies Inc. (recently acquired by Cisco 
Systems Inc.), Riverbed Technology 
Inc., Disksites Inc. and Tacit Networks 
Inc. use appliances at both the remote 
site and the central data center for 
global file sharing. The appliances 
speed up access to shared files in part 
by removing the overhead associated 
with file-serving protocols such as the 
Common Internet File System and 
Network File System. 

Mukesh Shah, director of network 
services at The Associated Merchan- 
dising Corp. (AMC) in Plainfield, NJ., 
is in charge of file-sharing operations 

among 40 remote locations in a 
worldwide network that includes 
data center hubs in Hong Kong 
and New Jersey. 

AMC uses MetaFrame serverware 
from Fort Lauderdale, Fla.-based Citrix 
Systems Inc., which gives Windows XP 

PCs and wireless devices virtual, 

thin-client access to applications 
running on back-end servers. It 
also uses the New Jersey data 
center for global file sharing 

of Excel spreadsheets, Micro- 

soft Word documents and 
other files. 

But users in Asia and Eu- 
rope were waiting more than 
two minutes for remote files 

to open. The system also lacked 
adequate file-locking safeguards 
for some shared files. Users were 
“quite unhappy,” Shah says. 

Eight months ago, Shah began 
piloting a caching appliance from 
South Plainfield, N.J.-based Tacit 
Networks in his New Jersey data 
center. File-access times dropped 
from an average of 122 seconds 
to ll seconds on first access and 

eliminated the end-user wait 
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BACKING UP THE BRANCH OFFICE 


Ina typical remote office scenario, 
PCs and application servers in branch 
offices running backup client pro- 
grams are backed up throughout the 
day to alocal disk appliance. From 
there, data is automatically replicated 
across a WAN link to another appli- 
ance in the data center. The datais 
then streamed to a tape library for 
archiving. 


eevcccces 


altogether on subsequent attempts 
after the file was loaded into the local 


| appliance’s cache. 


“Tacit has a process where you can 
push files to a local cache on a sched- 
uled basis,” Shah says. “So when users 
go to access the file, it’s already there.” 

When users change and save the 
file back to the cache, it’s also saved 


| on the main file-sharing server in 


New Jersey, where AMC staffers back 
it up. “All restores can be done cen- 
trally, whereas if we had to substitute 


| the cache appliance with a file server, 


we'd have the complexity of backups 


don’t have the time or resources to set 
up a remote backup system can con- 
sider similar offerings from service 
providers. 

Brian Asselin, IT director at Harbor- 
side Healthcare Corp., a Boston-based 
long-term care company, oversees op- 
erations for 55 locations and 8,500 em- 


| ployees, but he says he has only one IT 


person for each of the nine states in 
which facilities are located. 
Harborside had been using direct- 


| attached tape backup for its remote 


application servers, but Asselin says 
ensuring that backups occurred and 
performing restores were a nightmare. 

“Our people working in the facilities 
are definitely technically challenged,” 
he says. “Logistically, it would be im- 
possible to restore with the people 
I have.” 

What’s more, the Health Insurance 
Portability and Accountability Act 
requires greater security around pa- 
tient information than Harborside’s IT 
infrastructure can provide, Asselin 
says. “There’s just a slew of security 
that needs to be in place by 2005 for 
HIPAA,” he says. 

Instead of building a central data 
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| center where data could be replicated 

| for disaster recovery purposes and fur- 
| ther burdening his IT staff, Asselin 

| chose service provider AmeriVault 

| Corp. in Waltham, Mass., to host back- 
| up data storage and handle daily repli- 


cation from the remote sites. 
AmeriVault installed its Central- 


| Control software on Harborside’s 

| desktops and an agent on each of its 

| servers. After completing an initial full 
| backup of all data, the vendor per- 

| forms daily, incremental, encrypted 

| backups over the Internet to its disas- 

| ter recovery centers. 

and restores at the remote office level,” | 
| Shah says. 


| Outsourcing It All 


| Overworked IT organizations that 


In an emergency, administrators at 


| Harborside can perform data restores, 
|} even from home, using a point-and- 


click application on AmeriVault’s Web 
portal. Alternatively, data can be 
shipped on tape for large restores. 
Asselin says AmeriVault has 
“processes and procedures” that are 
HIPAA-compliant, which relieves his 
staff from having to set up its own 


| compliance program. And Asselin 
| says he also reduced labor costs by 
| outsourcing his remote backup and 


recovery architecture because “we 
don’t have to have people running 


| around dedicated to the task of 
| backup.” 


But while the remote backup 


| technology made processes more 
| efficient, the outsourcing approach 
| wasn’t necessarily cheaper. 


“In terms of actual backup cost, 
it’s pretty much a wash. When you 
consider bandwidth and license 
payments for software, it’s pretty 


| much even with other backup solu- 
| tions,” Asselin says. 


Tony Asaro, an analyst at Enter- 


| prise Storage Group Inc. in Mil- 


ford, Mass., says the costs of edge 


| network backup technologies are 


continuing to drop, and as large 
companies investigate using these 
systems, big vendors are stepping 
in with new products. 
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Asaro points to EMC Corp.’s entry- 
level Clariion AX100 array, which can 
be directly attached to its NetWin 110 

| NAS Gateway or bought as a precon- 

| figured storage-area network with 
backup and storage management soft- 
ware for remote office backup. 

And EMC’s Legato RepliStor replica- 
tion software is bundled with switches 

| from Brocade Communications Sys- 
tems Inc. 

“I don’t think it’s a fad,” Asaro 

| says. “I think more people are going 
| to adopt this technology because it’s 


cost-effective.” @ 48547 





24 compurerwonn august 22, 2004 


TECHNOLOGY 


oottware 
Flight Plan 


On Aug. 1, Retired U.S. 
Air Force Maj. Gen. Paul 
D. Nielsen became CEO 
and director of Carnegie 


Mellon University’s Soft- | 


ware Engineering Insti- 


tute in Pittsburgh. Before | 


assuming his new job, 

Nielsen talked to Com- 

puterworld’s Linda 

Rosencrance about what 
his work in the military means for the 
future of IT and about his agenda for 
the SEI. 


What are some leading-edge IT research 
areas in the military? How could they be ap- 
plied to the commercial world in the future? 
The military leads in large-scale inte- 
gration. In the past, we had communi- 
cation networks that operated at differ- 
ent frequencies that made it hard for 
people to talk to someone who was on 
a different frequency or a different 
kind of receiver. So we're trying to in- 
tegrate all those systems so people can 
do cross-banding — so a person who 
has a UHF radio ultimately can net- 
work into a trunk that’s maybe at satel- 
lite frequency back to the States and 
then talk to someone and get informa- 
tion back. 

I think that’s an application the 
commercial world could benefit from. 
When you think that there is one satel- 
lite providing cable TV to the entire 
coast of the U.S., losing a satellite 
could be a terrible thing. But if you 
could do some of this cross-banding, 
cross-networking, you might have 
some ways to work around issues like 


| look at whether we can do active 
| cancellation of noise that cou- 

| ples into your body through 

| your bones. In the three-to-five year 

| range, [reducing that noise] will help 
| airline pilots, because it’s really based 
| on [current technology], and it’s just 





| that and lease services on some other 
| satellite to start to provide services to 


people that you've lost. 
Another project in the military is 


| speech enhancement ... where we’re 


doing some unique kind of work. 
For example, when linguists listen in 


on people around the world, often the 


links that they listen to are rather 


| noisy. So we’ve had to work over the 
| years to take out the noise in the sys- 
| tems so the linguist has a better shot 


at understanding what’s going on. 
Because some noise gets conducted 
through your body — through 
your bones, not just your 
eardrums — we're starting to 


extending it to different frequencies 
and power levels. 


What are the top research projects on the 
SEI’s agenda for the next three to five years? 


Title: CEO and director 


Organization: Carnegie Mellon Uni 


Engineering Institute 
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| The SEI is already involved in two of 
| the most important pervasive areas in 
| software engineering: process im- 

| provement for software and system 


development, and network security. 

I’m convinced that increased efforts 
in software architectures could help in 
software quality, productivity and se- 
curity. We need to boost our efforts in 
this area. 

In Department of Defense systems 
and in commercial systems, we are in- 


| creasingly seeing the challenges and 


difficulties associated with higher and 
higher levels of integration. 

We also see the great benefits to 
horizontal integration across systems, 
across enterprises. In most cases, soft- 
ware is predominantly the glue that 
holds these systems together. So the 


| line between good software engineer- 
ing and good systems engineering is 


lurring. SEI has to work with the in- 


| dustrial base, the academic community 
| and the government to improve the 


state of systems engineering in the 


| United States. 


There are other important areas: 
formal validation and verification, 


| COTS [commercial off-the-shelf] 


reuse, software supportability, anti- 
tamper technologies for software, the 
growing issues of wireless 
[networks]. 

I'd also like to look at ultra- 
secure systems for certain ap- 
plications and what are the 
software implications of nano- 
systems, advanced robotic systems and 
software in health-related systems, in- 


cluding prosthetics. 


What would you hope those projects will lead 


| to, and when? My hope is that we could 


make significant contributions in all of 
these areas over the next three to five 
years. SEI does not have to do this 


ersity’s Software 


Background: Nielsen is a graduate of the U.S. Air Force 
Academy. He has earned three degrees, including a 


Ph.D. in plasma physics from the Ur 


ersity of Califor- 


nia, Davis. Until-recently, he was commander of the Air 
Force Research Laboratory at Wright-Patterson Air 
Force Base in Ohio, where he managed an annual 
budget of more than $3 billion. 
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Taming Unruly 
Systems 


A’sampler of SEI proiects 
that are under way: 


| work alone. We do it in conjunction 
| with the broad scientific community in 
| the U.S. and throughout the world. 


| How will the technology for these projects 
| get transferred to the commercial sector? 


Since we work with the broad commu- 


| nity, improvements and breakthroughs 
| will transfer based on their merits. 


We also work with the standards 
bodies to bring some consistency to 
the software “battlefield,” and clearly 
major governmental sponsors like the 


| DOD and the Department of Home- 


land Security help transition some 
efforts by bringing their substantial 
weight behind some efforts. 


How will it help the corporate IT depart- 
ment? Corporate IT departments are 
an important market for software engi- 
neering technology, even though these 
same technologies are also very impor- 
tant to corporations for their external 
markets. Corporate IT departments 
need quality systems that are afford- 
able, sustainable, reliable, evolvable 
and secure. Isn’t this the heart of all 
the efforts on software engineering? 

Improvements in the quality of the 
software, the supportability of the sys- 
tems and especially the security of cor- 
porate systems are crucial for corpo- 
rate IT departments. @ 48711 
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Antivirus Service 
Troubled by TLS 


Getting Transport Layer Security encryp- 
tion up and running is difficult enough 
without having to migrate it to work with 
an antivirus service. By Roger Foix 


N MY LAST COLUMN, I ex- 

plained my experiences 

setting up Transport Layer 

Security and how compli- 
cated it could get. Unfortu- 
nately, I’ve since discovered 
that it gets a lot worse. 

TLS is a wonderful protocol 
that can be used to encrypt 
e-mail between two compa- 
nies very easily. Most modern 
e-mail gateway soft- 
ware comes with TLS 
support built in, but 
there’s a lot involved 
in setting it up, as I 
discussed last time 
[QuickLink 48237]. 
This week, we’ve 
been making things more 
complex by adding antivirus 
services to the mix. 

A strategic decision was 
made that it would be better 
to make sure viruses never 
reach our infrastructure, and 
Gloucester, England-based 
MessageLabs Ltd. was chosen 
as the service provider. Nor- 
mally, I’m cynical about the 
abilities of vendors’ technical 
staffs. But after working with 


| be involved. I was concerned 


| tion. They were asked, “ 


about one throwaway com- 


| ment at the end of the Mes- 


sageLabs people’s presenta- 
How 
do we ensure that all our e- 
mail goes through your ser- 
vice?” They answered, “We 


| just change your MX record to 


SECURITY 
MANAGER'S 
JOURNAL a 


| 
| 
| 
1 


point to our servers instead.” 
Mail exchange, or MX, 
records are the rout- 
ing part of the mail 
service: They tell 
the world which 
servers should han- 
dle e-mail for a par- 
ticular domain. By 
changing our MX 
record to point to its servers, 
MessageLabs ensures that all 


| of our mail goes through its 
| servers, where it can be 
| scanned for viruses. 


That’s a simple and quick 


| solution. But by changing our 


MX records, MessageLabs is 


| suddenly rerouting all our 


TLS connections as well, and 


| we’ve got about 30 of them 


Technically, this shouldn’t 


| present a problem. Their 


MessageLabs, for the first time | 


in years I can say I’m im- 
pressed with a vendor. 


Ten Minutes to Trouble 
I was invited to the initial 
meeting with MessageLabs 
as an afterthought. My col- 
leagues thought I didn’t need 
to get involved, but they invit- 
ed me to be polite. After all, 
I was dealing with secure 
e-mail, so they figured I might 
as well be along at the start 
to agree that I didn’t need to 
be involved. The meeting 
would take only 10 minutes, 
I was told. 

Unfortunately, I did need to 


| 
| 
| 
| 
| 





servers can do TLS, ours can 


| do TLS, all our clients’ servers 


can do TLS, and so it should 
just be a matter of making 


I’m not happy that 
I’m spending most of 
my time dealing with 

a project that was 
supposed to take 
10 minutes of my time. 





sure it’s working on every 
server. But so far, about 95% of 
the project time is being spent 


| dealing with the little TLS 
| problems caused by the mi- 


gration. The antivirus people 
aren’t happy that their project 


| seems to be getting derailed, 

| and I’m not happy that I’m 

| spending most of my time 

| dealing with a project that was 
| supposed to take 10 minutes of 


my time. 


| The Big Holdup 


Truth be told, much of the de- 


| lay is really my group’s fault: 


We had a bizarrely nonstan- 


| dard set of TLS connections. 


Some of our more important 
clients have decided to do 


| things their own way, and we 


have to follow their lead. As a 


| result, all of our TLS connec- 


tions seem to have ended up 
being subtly different: One 


| uses strong encryption, one 


uses weak; one uses MX rout- 
ing, another uses static; one 
does one type of authentica- 


| tion, another uses none at all; 
| and so on. 


All that gives us quite a 
complicated TLS environment 
that must be extensively test- 


| ed and migrated to Message- 


Labs. But there are two prob- 


| lems. First, much of the testing | 
| must be done on our produc- 
| tion systems because our test 


environment isn’t extensive. 
Second, testing TLS connec- 

tions on our clients requires 

the cooperation of our clients’ 


| IT staffs. We must deal with 30 


IT staffs working for 30 clients 


| on six continents in nine time 


zones, with 12 sets of holidays 
and eight native languages. 
The tests themselves are 


| easy — send an e-mail to our 


clients, get them to reply to it, 


| and then quickly check the 


routing to make sure it was all 
encrypted. But when you’re 
sending an e-mail from a mail 
server on the West Coast in 


the U.S. to a server in France, 
you've got to send the mail be- 
fore 9:30 a.m. if you want a re- 
ply. So every test tends to take 
| at least a day because we have 
to wait for people in all the 
time zones to report back. 

Then, just when we'd gotten 
it all working, we crashed the 
production mail servers. I 
won't go into exactly how we 
did it — it gets embarrassing 
— but I will say that it turned 
out to be an obvious error. 

We also took a lot of flak 
from our sales staff about cut- 

ting off their e-mail links to 
clients. One sarcastic sales- 
man’s comments hit home. He 
said, “Remind me, isn’t securi- 
ty all about making sure that 

-mail keeps working? Doesn't 

that make it somewhat ironic 
that you’re the ones who are 
crashing it?” 

It’s always hardest to deal 
with the truth. 

While I’m on the subject of 
embarrassing moments, the 
worst bit about working with 
MessageLabs is that its people 
seem to know what they’re 
doing. At our technical meet- 
ings, our experts spend 20 
minutes discussing whether 
an idea will work, whether 

| we'll be able to do it with our 
| software, who’s actually going 
| to do it, and so on. 

Then, when we ask Mes- 

sageLabs, “Can you do this?” 
we get the immediate re- 
| sponse, “Absolutely, no prob- 
| lems.” Twenty minutes for us, 
three seconds for them. 

So my advice for those of 
you looking to use TLS witha 
managed antivirus service is 
to make absolutely sure that 

| your TLS environment is as 
simple as possible before you 
try to migrate it. Better still, 
get the managed antivirus ser- 
vice in place before you set up 

| those TLS connections. Be- 

| lieve me, you'll save yourself a 

| great deal of stress. D 


| WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Roger Foix,” whose 
name and employer have been disguised 
| for obvious reasons. Contact him at 
roger.foix@hushmail.com, or join the dis- 
cussion in our forum: QuickLink a1590 


To find a complete archive of our 


| Security Manager's Journals, go online to 


| @computerworld.com/secjournal 
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Firetrust Releases 
MailWasher Tool 


MailWasher Server, an enter- 
prisewide system for e-mail 
security management, is now 
available from Firetrust Ltd. in 
Christchurch, New Zealand. 
The product is priced from 

$7 to $29 per seat and is avail- 
able for Windows, Solaris and 
Linux operating systems. Mail- 
Washer Server's multilayered 
approach identifies spam or 
malicious e-mail before it en- 
ters a network. The product 
uses statistical content analy- 
sis filtering, connection filter- 
ing, policy enforcement, and 
blacklists and whitelists to 
help remove spam. 


McAfee Revises 
Policy Orchestrator 
Santa Clara, Calif.-based 
McAfee Inc. announced a 
new version of its ePolicy Or- 
chestrator security event man- 
agement software. EPO 3.5 is 
designed to work with Micro- 
soft Corp.’s Active Directory, 
can alert staff to network 
threats and compliance- 
related issues, and integrates 
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Sybase Rolls Out 
PowerBuilder 10 


Sybase Inc. has announced the 
release of its Sybase Power- 
Builder 10 application develop- 
ment software. New features 
include Unicode support, en- 
hanced XML Web DataWindow 
and .Net support, and an Applica- | 
tion Refactoring and Object Mod- 
eling function that lets program- 
mers reverse-engineer applica- 
tions. PowerBuilder 10 sells for 
$2,995; upgrade pricing is $645, 
according to the Dublin, Calif.- 
based company. 


Certance Launches 
Ultrium Tape Drives 


Certance LLC in Costa Mesa, 

Calif., announced its CL 800 LTO 
Ultrium 3 series and CL 400H 

LTO Ultrium 2 series tape drives. 
The CL 800 costs $5,899, has a 
capacity of 800GB and a transfer | 
rate of 490GB per hour and is 
aimed at large companies. The CL | 
400H, which costs $1,999 and 

has a 400GB capacity, is target- 

ed at small to midsize businesses. | 
The unit boasts a 144GB-per- 

hour transfer rate and is targeted 

at small to midsize businesses. 


How does your 
organization view 
Hewlett-Packard’s 
Itanium server 
road map? 


No plan to upgrade 
42% | 


Not sure 


17% 


Plans to upgrade 


16% 


Has concerns/not a good option 
ans 5% 


Has already implemented 
9% 


NOTE: Margin of error is plus 

or minus 4%. 

SOURCE: Interex/HP user group poll 
of 350 members, July 2004 
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Here's to Your 
(Electronic) Health 


HAD MY annual physical last week, and there 
were no surprises. The standard admonitions to 
watch my diet and get more exercise were ac- 
companied by the usual depressing reassurances 
that all of those little aches, pains and minor 
bodily dysfunctions were merely normal signs of aging. 


Also as usual, my prima- 
ry care physician imparted 
this advice and information 
while shuffling through a 
bulging manila folder, look- 
ing in vain for notes from 
specialists and test results 
that either had never been 
sent or had been inadver- 
tently tucked into an EKG 
printout from five years 
ago. That manila folder is 
as close to a comprehen- 
sive medical record as ex- 
ists for me. And I’m much 
better off than most people, since I’ve 
been going to the same internist for 
20 years. 
This country’s medical records sys- 
tem, or lack thereof, is just one of the 


things desperately wrong with the way | 


we deliver health care in the U.S. The 
good news is that the federal govern- 
ment has a plan to use information 
technology to fix this aspect of the 
medical mess. The bad news is that 
the plan will take so long and cost so 
much to execute that it’s hard to have 
confidence that it will ever come to 
fruition. 

Last month, the U.S. Department of 
Health and Human Services (HHS) re- 
leased its 10-year road map for the cre- 
ation of a “health information infra- 
structure.” The aim is to create a con- 
solidated electronic health record 
(EHR) for every American and to 
build a nationwide network for secure- 
ly transporting those records to health 
care providers. 

The potential benefits of the system 
are enormous. Estimates of financial 
savings resulting from streamlined 





health care administration 
and the elimination of re- 
dundant care range as high 


lars a year. 

Beyond monetary con- 
siderations, a single EHR 
for every citizen would 
translate into improved 


care. Access to more infor- | 


mation means that doctors 
and other providers will 
make fewer mistakes. Di- 
agnoses and treatment 
plans would be more likely 
to be made in the context of the pa- 
tient’s overall health and medical his- 
tory, rather than just in response to in- 
dividual symptoms. In this case, tech- 
nology would actually promote a more 
holistic practice of medicine. 
So, if the potential benefits the 


| health information infrastructure are 


so great, why isn’t it on a faster track? 
A decade is a long time to wait. 
Looking beyond the delays endemic 
to political maneuvering and en- 
trenched bureaucracies, the sticking 
points are money and technology. 
While the system will lead to enor- 
mous savings once it’s implemented, 
upfront costs will be hefty, and the 
largest portion of them aren’t covered 
in the federal budget. When the HHS 


| plan was announced, Mike Kappel, 
| vice president of strategic planning 
| at health care IT vendor McKesson 


Corp., told Computerworld that its 
price tag could reach $10 billion 
(QuickLink 48367]. With the feds allo- 
cating just $50 million for health care 
IT this fiscal year and $100 million 
for next year, there’s a big funding gap 





for hospitals and doctors to fill. 
Administration will incur a big 
chunk of those costs, but the technolo- 
gy challenges in the project are com- 
plex and expensive. An EHR is a virtu- 
al entity, not a collection of informa- 
tion that will reside in a single reposi- 


| tory. Pieces of the EHR will be scat- 
| tered among a variety of systems, 


locations and media. Authorization to 
access the network infrastructure con- 


Spa | necting them will be delegated by the 
as nearly half a trillion dol- | patient, who will have been assigned a 


| cradle-to-grave ID number and be re- 


quired to use two forms of authentica- 


| tion, such as a security token and a 
| thumbprint. Single sign-on capability 


will be crucial for providers, if the sys- 
tem is to succeed at its main mission: 
making it easier for them to get a pa- 


| tient’s complete history. 


The EHR system will have to main- 
tain a complete audit trail, tracking 
who accessed a patient’s record and 
when. Electronic document manage- 
ment and workflow tools must be inte- 
grated into the system, and providers 
will need to secure plenty of band- 
width to move images — digitized 
X-rays and CT and MRI scans and 
so on — around the network. 

There are standards battles and 
certification skirmishes to be fought. 


| Vendors have lots of work to do, most 
| critically on their software interfaces. 


Interoperability is what the project is 


| about. And nobody knows how long 


funding will last, or if the powers that 


| be will, as they say in Washington, stay 


the course on the project. 
But despite the complexity and un- 
certainty, few federal projects in re- 


| cent memory have been as worthwhile 


as this one is. Who knows, if the U.S. 


| can provide EHRs for each of its citi- 


zens, someday it might be able to give 
them all access to health care as well. 
@ 48627 
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HEN CIO JOHN HUMMEL tried to comput- 
erize the way doctors write prescriptions 
for patients at Sutter Health, a network of 
26 California hospitals, he came smack 
up against an immovable obstacle: physi- 
cian resistance. 

“We tried to implement computer physician order 
entry four or five different ways,” says Hummel. “We 
tried four different vendors. We tried PCs, tablets 
and PDAs.” In every case, technology slowed the 
process for the physicians. A prescription that took 
five seconds to order on paper took two to three 
minutes on the system. The doctors were frustrated 
over the crippling effect on their productivity, Hum- 
mel says. 

The result: “Even with the [improved] system we 
finally implemented, it takes about a year for a physi- 
cian to recover to 90% of their original productivity,” 
he explains, and less than 20% of the doctors use it. “I 
would have to label the attempt a resounding failure.” 

User resistance is nothing new in IT projects, but 
in a hospital setting, the stakes are higher, and life- 
saving projects can be doomed by recalcitrant doc- 
tors. Still, user opposition is justified if new safety 
systems steal precious time and disrupt workflow. 


SUCCESS 


Great hospital safety systems are all about 
getting the basics right - and knowing what 
motivates doctors. Y ( 
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The best way to win doctors over is to follow the 
same rules that guide any good IT system implemen- 


tation: Start with strong executive support and realis- | 


tic expectations; understand your processes and how 
the system will affect them; anchor the system with 
an efficient, bug-free back end; build a user-friendly 
front end; find committed users to lure in the rest; 
and provide good technical support. But most impor- 
tant, understand what really motivates your users. 


Failed Front Ends 


Hospital safety systems are doomed to fail if the 
physician-facing front end isn’t tied to an efficient 
and responsive back end, and the back end needs to 
be built first, says Chris Giglio, director of the Accel- 
erated Solutions Center at Cerner Corp., a Kansas 
City, Mo.-based vendor of hospital automation sys- 
tems. “The physician changes should be implement- 
ed last,” he says. The system must have a flawless 
workflow before it’s put in physicians’ hands so that 
the effect on them is minimized. 

Jayashree Raman, CIO at The Reading Hospital 
and Medical Center in Pennsylvania, is following that 
order. Last year, she installed a back-end medication 
administration records (MAR) system, which en- 
ables clinicians to match a patient’s bar code to the 
bar code on a prescription drug before it’s adminis- 
tered. “The MAR is designed to ensure the five 
rights: right patient, right drug, right time, right 
dosage, right route,” Raman explains. 

She also plans to implement a computerized physi- 
cian order entry (CPOE) system, but that wiil take 
time. “It is a complicated project affecting multiple 
departments,” Raman says. “We are working through 
the process issues and anticipate having a working 
model in the next few months.’ 

Tomorrow wouldn’t be soon enough for Terrence 
Cescon, a doctor at Berks Hematology-Oncology 
Associates Ltd., who works with Reading. “Reading 
Hospital is in the Stone Age,” says Cescon, who 
trained at Hahnemann University Hospital Inc. in 
Philadelphia, where a CPOE system had already been 
implemented. Because he’s familiar with the technol- 
ogy, ordering a prescription online is quicker for him 
than writing it by hand, he says. 


Back-End Basics 


But Hummel maintains that the back-end MAR sys- 
tems are even more important than the front-end 
physician systems. 

“It’s popular to point the finger at doctors’ horrible 
handwriting,” he says, referring to the 1999 Institute 
of Medicine report that estimated that as many as 
98,000 patients die each year as a result of prevent- 
able medical errors in hospitals. But more recent 
studies have shown that only 13% of the errors are 
due to poor handwriting, he says. Eleven percent are 
introduced at the pharmacy, and a full 50% of the er- 
rors are made at the bedside. 

“You can spend millions trying to avoid a physi- 
cian’s handwriting, but it won’t make that much dif- 
ference,” he says. “Hospitals can make a much bigger 
impact with bar coding.” 

Even so, MAR systems alone aren’t good enough, 
says Claire Turner, director of communications 
for The Leapfrog Group, a Washington-based con- 
sortium of companies that provide health care to 
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35 million Americans. “Implementing only the back- 
end process doesn’t deal with the real issue,” she 
says. “The earlier in the process you catch the errors, 
the better.” 

Turner compares a fully automated electronic 


| health record system (which includes both CPOE 


and MAR) to safety systems in a car. “We need a seat 
belt, an airbag and antilock brakes,” she says. 
John Glaser has had experience at both ends. At 


| Partners HealthCare System Inc., a nonprofit network 
| of 10 hospitals in the Boston area, he’s implementing 
| CPOE systems at several of his teaching hospitals. 


“It’s a bear — very complicated, highly invasive of 
workflow, constantly encountering challenges,” he 


DIFFERENT PLAYERS, 
SAME GAME 


ClOs and specialists who have implemented hospital 
safety systems say that while the players are different 
and the stakes are higher than for other IT projects, 
most of the success factors are similar. 


DRIVE the project from the operational area of the 


USE a multidisciplinary team that includes doctors 
and nurses to design the process. 


GET buy-in from ali stakeholders, especially top 
management and the top doctor in each department. 
Forcing a system on clinicians who don't see the 


KEEP all stakeholders informed throughout the 
process. Clinicians often don’t have offices and don't 
check e-mail, so devise special methods of keeping 
them up to date. 

ENLIST the nurses and other practitioners early and 
use their feedback to improve the process before 
attempting to convert the physicians. 

PROVIDE good support and resolve problems quick- 
ly. Have people on-site during the rollout phases - 
especially when physicians are involved. 


CORREO REET E HEHE TEESE EEE OEE HEE O ESE OEE E EEE EES 


MAKE SURE the system is ultrareliable. Keep anti- 
virus software up to date and fully test all patches 
before implementing them. A computer virus isn’t 
normally a life-or-death matter - unless the computer 
is monitoring someone's life support. 

SET the proper expectations for the project. Don't try 
to do too much too soon, and explain about trade- 
offs, such as time versus access to information. 
FOCUS on measurable quality and safety goals that 
relate to saving lives. Don't focus on financials or 
expect the system to save money. 


~CJRhoads 
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says. But unlike Hummel, he doesn’t use the term 
failure. “No project is a complete success or a com- 
plete failure,” he says. “It’s a matter of degrees. All 
projects have problems.” 

For example, Glaser tells of rocky times during a pi- 
lot of an MAR project. “The wireless PDAs and the net- 
work were flaky; they just didn’t work reliably,” he says. 
“Plus, we didn’t really think through the workflow.” 


Workflow Reworked 
| Workflow problems can sabotage a hospital safety 
| system because doctors won't stand for the disrup- 
| tion. “If you do it right, implementing a whole system 


is like ripping out the backbone of a hospital and re- 


| placing it,” says Paul Ruflin, CEO of Eclipsys Corp., a 
Se 


| Raton, Fla. “It is pervasive technology.” 


provider of hospital medical record software in Boca 


“The challenge is redesigning the entire work- 
flow,” says Jacque Dailey, CIO at Children’s Hospital 


| of Pittsburgh. “Success is based upon process im- 


provement, not the technology.” 
And process improvement requires strong support 
— from both executives and IT. Dennis Baker, CIO 
at Sarasota Memorial Hospital, a community hospital 
in Florida, has been learning about that since 1999, 
when he implemented a CPOE system without 
enough support from either group. “For years, we 
only had 25% of the orders placed online,” he says. 
Executive backing, although belated, made all the 


| difference. “We finally got the CEO involved,” Baker 
| says. The CEO sent a letter to all the physicians, 


mandating the use of the system within a year. “Now 
we are proceeding floor by floor with extra support 


| for the clinicians using it,” he says. “We are up to 50% 
| and expect to get to 80% by the end of the year.” 


Although automated hospital systems are expen- 
sive and disruptive and doctors complain about lost 
productivity in the early phases, helping everyone 
focus on the big picture can improve the outcome. 
“You have to do this for the right reasons,” Hummel 
says, “and return on investment isn’t one of them.” 

Hummel says that motivation can make all the dif- 
ference in physicians’ acceptance of a new system, 


| recalling a project designed to ensure that specially 
| trained doctors called intensivists monitor critical- 


care unit patients. “We implemented a video system 
so that intensivists can monitor 50 beds at a time in- 
stead of 10,” Hummel explains. 

Because there are only a few intensivists available, 
they were thrilled to be able to monitor more people 
during each shift. “We decreased fatalities by 25%,” 
he says. “We proved that it works. The cost is over 
$5,000 per bed per month, but we saved lives.” 

Jocelyn Benes, vice president of quality control 
at Children’s Hospital of Pittsburgh, says that when 
the hospital implemented a CPOE system, “we didn’t 
even measure financial benefits. Our focus on quali- 
ty was one of the reasons we were successful.” 

Benes says that appealing to users’ dedication to the 
job is the key to getting their buy-in. “Clinicians are 
more receptive to doing what’s best for the patient 
than they are to saving money,” she explains. “We 
were successful in decreasing errors, and that’s all 
that mattered to the patients and the staff.” @ 48395 





Rhoads is a freelance writer in the Philadelphia area. 


| Contact her at CIRhoads@ETMAssociates.com. 
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iL SURVIVAL 


GUIDE 


RETIRING ClO PAUL INGEVALDSON 
OFFERS 10 TIPS FOR SURVIVING - 


ANU PRUSPERING = IN THIET UUNGLE. 





DEAR COLLEAGUES: 


I’ve been in IT for 40 years, and I plan 
to retire at the end of this year. Yes, I’m 
retiring as the CIO, and I’m not being 
downsized, forcibly replaced or fired. 
I’ve been at my current company, 
Ace Hardware Corp., for 25 
years. That’s a long time in 
this day and age of the port- 
able CIO. In fact, Computer- 
world.com reported Dec. 22 that the 
average CIO tenure is 18 to 36 months. 
Over the past 40 years in technology, 
I’ve developed some practices that have 
served me well. Perhaps they can also 
help you survive in the treacherous 
world of IT. So here are Ingevaldson’s 
top 10 ways to survive the IT jungle: 


Don’t be afraid to leave IT. It’s a 
great experience, and you'll 
probably come back. And you 


will come back as a more well-rounded 
executive. You will also experience IT 
from the outside in and better under- 
stand people’s true feelings about IT 
within the corporation. 

And there is nothing more fun and 
more daunting than trying to make the 
revenue line. Most of us manage ex- 
penses well, but that revenue line is 
really a challenge. Believe me, you will 
gain renewed respect for your users. 


Don’t keep IT in the closet. Spread 

the word, create excitement and 

convince people to get on the IT 
bandwagon. We are in a very exciting, 
dynamic profession that is changing 
the life of everyone on the planet. You 
may sometimes think we are selling 
reports and screens, but remember: 
We're creating business-changing 


IT MENTOR 


and life-changing systems. 


you don’t. But even if you do, it 

will change. Read voraciously, 
and know what’s going on. Read out- 
side of your expertise so you can see 
the world on a bit larger 
stage. I love Harvard Busi- 
ness Review, The Economist 
and MIT Technology Re- 
view, along with all the other tech- 
nology magazines and newspapers. 


| 
| Never think you know it all, because 


Understand the corporate strategy and 

mobilize IT to support it. Be sure 

you're part of the process, not just 
the implementer. This is a high priori- 

| ty, and you must make yourself neces- 

sary in the strategy meetings. This 

requires that you think in company 

| terms, not IT terms. This is really a 

stretch for some of us, and it’s where 

the rubber meets the road. 


Develop a “cheap” image. For some 
of us, especially a Norwegian 
like me, this is easy. IT is an ex- 
pensive, misunderstood area that is 
| clouded by mistrust and arcane con- 
cepts. The last thing you need to do 
is flaunt your image and act like a 
know-it-all IT savant. Get rid of the 
| Armanis and the pinkie rings. Be 
down to earth and talk business-speak, 
| not IT-speak. 


Don’t overmanage IT personnel. Our 
business is exciting and self- 
motivating. Provide the proper 
tools and environment, set the right 
strategy, and get out of the way. Re- 
| member when you were a program- 
mer, and how the worst thing was to 








have someone looking over your 
shoulder. 


Expect your people to make dates and 

budgets on projects. Do this by man- 

aging the lock-in dates for both 
and by minimizing specification creep. 
Missed deadlines and busted budgets 
give IT a bad name, and they are often 
caused by uninvolved users. Be sure 
no, demand — that you have user in- 
volvement in projects. Be strong and 
vigilant. Sure, some projects will go 
over, but that should be the exception, 
not the rule. 


Don’t charge out IT. Operate it as 

an expense center. I feel very 

strongly that the need to charge 
out is an indication that the company 
doesn’t support IT. If you have a proc- 
ess where top executives make the pri- 
oritization decisions, then IT is work- 
ing on the important applications. 
There is no need to charge out. 

If you decide to charge out and thus 
operate IT like a utility, then it will 
never be strategic. Nicholas Carr will 
be right [QuickLink 37990]. Having 
electricity in the wall won't give you 
a strategic advantage. It’s just a cost 
of entry into the game. Besides, the 
charge-out system is a big system that 
requires a huge amount of processing 





time and data input, and it results in 
much disagreement with the very 
users we are trying to nurture. 


Learn to delegate. If you’re answer- 

ing too many easy questions, 

you're not delegating enough. 
Sure, it makes you feel good that you 
still know the answers, and that is a big 
thing for an ITer. If you delegate the 
easy ones and get only the hard ones, 
you'll have a tougher day, but your 
people will feel more engaged and the 
department will move faster. Besides, 
tough days are why they invented sin- 
gle malts. 


Force IT onto the plate of all senior exec- 

utives. They can handle it. It’s part 

of their job, just like finance, mar- 
keting and all the other major depart- 
ments. Just mention that you spend be- 
tween 1% and 7% of corporate revenue 
and you want to get them more in- 
volved. What are they going to say? 
You'll be surprised by how much they 
really want to understand technology. 


That’s my list. It has helped me 
avoid some of the pitfalls that are out 
there, and I hope it helps you. Good 


| luck and have fun. You’re in a great 


business. @ 48479 
— Paul Ingevaldson 


His 25 years at Ace Hardware have taught Paul Ingevaldson key lessons that apply to all ClOs. 
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Open-source software comes with 
rights and obligations. Here’s what that 
license is really all about. 


Nothing in life is really free, says Larry Rosen, 
and that includes open-source software. As open- 
source gains traction in business, it’s increasingly im- 
portant to understand the licenses under which it’s 
used. Rosen, who formerly taught programming and 
database design at Stanford University, is also a found- 
ing partner of Rosenlaw & Einschlag, a technology law 
firm in Los Altos Hills and Ukiah, Calif., and the author 
of Open Source Licensing: Software Freedom and 
Intellectual Property Law (Prentice Hall PTR, 2004). 
He talked with Computerworld’s Kathleen Melymuka 
about rights and obligations under open-source. 


As an IT manager, why do | need to know or care about open- 
source licensing? Because you or your company is, or 
soon will be, using open-source software. 


I never realized that licensing was even an issue in open- 
source. Why do | need a license for something that’s free? 
Because of the problem with the word free. 

It means too many different things in the 
language. Birds are free to fly. Is open- 

source software free in that sense? 


Then what does it mean? It means you are giv- 
en the freedom to do certain things with 
the software — things like use it, copy it, 
change it, combine it with other stuff. Be- 
cause of that, what’s important is the license 
under which those freedoms are protected. 


What are the key things to look for in an open-source license? 
What you need to look for is “What am I being li- 
censed to do?” and “What are the conditions that I’m 
accepting when I take that license?” And therein lies 
a tale. 


Are there any deal-breakers | need to really watch out for? 
What you need to look out for is what you give up. 
What are the conditions, because nothing is really 
free in life. What you have to give up can be expen- 
sive. It depends on the license. You may have an oblig- 
ation to expose your own source code, take a risk, dis- 
tribute it under the same license. It’s not just free. 


Can you give me an example of something that might catch 
a company by surprise? The one that most people are 
concerned about is if you create a derivative work 
and distribute it, you’re required to disclose your 
changes and distribute it under the same [open- 
source] license. 


Then I can’t use open-source and customize my own soft- 
ware? You can. For internal uses, it’s your business. 
But if you choose to share it with some other compa- 
ny, your obligation under some licenses is to make it 
available under the same license. 


So | can’t sell it? No. That’s what people think. You can 
try to sell it, but if you’re required to distribute it un- 
der the same license, that license allows people to 
make copies for free, so you have to tell them they 
can also have it for free. 


What is the General Public License and why 
should | care? The GPL is the archetype, the 
first and best and most popular and most 
influential of all open-source licenses. It is 
the license under which Linux is distrib- 
uted and many other software packages 
that are extremely important in open- 
source. About 70% of all open-source is 
licensed under the GPL. So it’s important 
to understand it and its legal effects, its 
strengths and its weaknesses. 


Your book has a section on litigation. Why would anyone sue 
over free software? People sue over intellectual property 
because it is property and because the stakes are so 
high and because the legal constructs are not black 
and white, and so licenses get interpreted and side 
agreements get made between companies. Lawsuits 
are usually by people who don’t want it to be free — 
who want to lock it back up again. As open-source be- 
comes successful, people are going to want to try to 
make it proprietary, to claim ownership over things 
they don’t have rights to. People will sue over what 
they have sued about since the first case: money and 


property. @ 48482 


There is much more to software than the disk it 
comes on. As one California court wrote in 1948, 
property is a very broad concept that includes not 
only the tangible but also “every intangible benefit 
and prerogative susceptibie of possession or disposi- 
tion.” Computer software is this kind of intangible 
property because, under the law, it comes with spe- 
cific but intangible benefits and prerogatives that can 
be separately owned and disposed of. 

Software is a product of human intellect, and 
therefore it is a kind of intellectual property. Intellec- 
tual property is a valuable property interest, and the 
law allows its owner to possess and control it. The 
programmer who writes software — or the company 
that hires that person to write software - is deemed 
to be the first owner of intellectual property embod- 
ied in that software. That owner may exercise domin- 
ion over that intellectual property. He can give it 
away, Sell it or license others to use it. That owner 
has the prerogative to create copies of the intellectu- 
al property, and he or she may prevent others from 
making, using or selling those copies. 

Because of these partly tangible and partly intan- 
gible aspects of computer software, it is possible to 
have different owners own (1) a tangible copy of soft- 
ware purchased at a computer store or downloaded 
from a Web site, and (2) the intellectual property em- 
bodied in that software 

Never confuse these two aspects of intellectual 
property, for the laws apply differently to each. 


Excerpted with permission from Open Source 
Licensing: Software Freedom and Intellectual 
Property Law. Copyright 2005 Lawrence 
Rosen (Prentice Hall PTR, 2004). 
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CLOSE-UP: IT Project Leaders 


Which has the most effect 
on the motivation of software 
project team members? 


Team peers — 
Project manager ——— 
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In your organization, 
how are team leaders 
usually selected? 


By training — = 
By technical acumen ————! 
“—— By leadership skills 


BASE: Software project teams from more than 250 development organizations 
SOURCE: Cutter Consortium, Arlington, Mass., 2004 


Grooming Next-Gen IT Pros 


In a 2004 IBM survey of 450 global 
CEOs, 75% cited education and a 
lack of qualified candidates as the 
issues that will have the greatest 
effect on their businesses over the 
next three years. 

IBM is aiming to better prepare 
graduates for tomorrow's IT jobs by 
providing colleges and universities 
with a wide range of education bene- 
fits and programs designed to teach 
students open standards skills. In ad- 
dition to offering 40 software pro- 
grams free of charge through a Web- 
based portal, the company is offering 


educators a special rate on hardware. 


Under the new IBM Academic Initia- 
tive, the vendor will also assign tech- 


nical teams to various universities to 
assess their IT curricula and provide 

special training and skills transfer for 
faculty and staff. 

Universities participating in the 
pilot program include the University of 
Houston-Clear Lake, Indiana State 
University, Worcester Polytechnic In- 
stitute and Universidade de Brasilia. 
IBM says it developed the program in 
response to the need for IT profes- 
sionals with skills in open-standards- 
based products. Linux, for example, is 
the fastest-growing operating system, 
according to IDC. Java, meanwhile, is 
used by more than 70% of all enter- 


: prises, according to Gartner Inc. 


- Julia King 


ASK AN IT LEADER 


aT 
technology officer 
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1 am currently a junior in college, focused 
on networking. But my school isn’t very 
strong in that field. What can I do on my 
own to develop skills that will make me 
competitive with students from other 
schools? There are many things you can do 
to make yourself more marketable. First of all, 
make sure you take advantage of every oppor- 
tunity to get a well-rounded education. Having 
strong expertise in one or more specialized ar- 
eas is important, but most employers are inter- 
ested in candidates with diverse skills and 
knowledge in many different fields. 

In addition to technology courses, take 
classes that will help you develop strategic and 
critical thinking skills. If you can think strategi- 
cally and understand business issues, you will 
be better able to position yourself as a valued 
technology resource rather than just a com- 
modity. To deveiop your networking skills, Keep 
current with the latest trends by reading books 
and trade journals and utilizing Internet re- 
sources. Also, look for opportunities to apply 
and expand your technology experience 
through part-time work, internships or even 


Is the retention of your IT staff 


becuming more orless important 
as the economy improves? 


BASE: 1,400 Cis at U.S. companies 

‘SOURCE: Robert Half Technology, 

Menio Park, Calif., July 2004 
Much less 
important 


volunteer work. if you are fairly certain you 
want to pursue a career in networking, you 
might want to consider transferring to a school 
that has a strong reputation in that field. 


How can | exploit my in-depth knowledge 
of both software engineering and bio- 
technology while hedging bets against 
job outsourcing? Combining a specialty 
(such as software engineering) with in-depth 
knowledge of a growth industry (like biotech- 
nology) is a great strategy. To enhance your 
marketability, keep up with innovation in both 
your specialty and industry. In addition, look for 
ways to provide unique value to your future em- 
ployer. This requires keeping current with 
what's happening in the IT marketplace so you 
don't find yourself in a role that is viewed as a 
commodity. At Capital One, we choose soft- 
ware engineers/architects who can take a 
strategic view of not only the IT organization, 
but also the company as a whole. The wider 
view enables them to create better architec- 
tures and better systems for the company 


| Should | plan to leverage the portfolio of 
white papers, audits, analyses and case 


studies | have created in my career when 
interviewing for a director or CIO posi- 
tion? Some argue that writing skills are 
irrelevant to the CIO position because 
verbal and leadership skills are more im- 
portant. Strong writing skills are valuable re- 
gardless what career path one takes. Effective 
leadership requires being able to convey infor- 
mation and strategies to people in a clear, con- 
cise and persuasive manner, whether verbally 
or in writing. A strong portfolio that demon- 
strates your ability to communicate effectively 


+ through a variety of writing styles will make a 


favorable impression on most hiring managers. 
More and more, business leaders are looking 
for IT professionals who can be strategic 
thinkers and truly understand the nuts and bolts 
of business dynamics. Being able to demon- 
strate your strengths in writing is an added tool 
in your arsenal. Don't forget to make sure your 
résumé casts you in the best light. @ 48706 
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QUICK HITS 


IT GOVERNANCE 


How would you describe 
your IT organization? 


Centralized Decentralized 
entralize a 


Mixture 
ofboth 


Base: 867 IT decision-makers at 
North American companies 


In mixed organizations, which 
IT activities report primarily to 
business units rather than to IT? 


Business analysis and process expertise 
45% 
Project management 
40% 

Application maintenance and support 

34% 
Application development 

32% 

Help desk 


19% 


Networking and telecommunications 

He 19% 

Architecture 

6% 

Database operations 

§5% 
Base: 309 IT decision-makers at North 

American and European companies. 
Multiple responses allowed. 

To whom does the CIO or senior 

IT decision-maker report? 


NORTH AMERICA 


29% 30% 


27% 
President, 


COO or other 
operations exec 


Board of directors/ 
owner: 1% 


unit: 5% 
Other: 9% 


EUROPE 


Senior 
exec 
from other 
business 


operations 
exec 


cancel 
Board of directors/owner: 6% 


Base: 1,263 IT decision-makers at North | 
American and European companies. (Percent- | 
ages may not total 100 because of rounding.) 
Source: Forrester Research Inc., 
Cambridge, Mass., July 2004. 


Other: 8% 











EDWARD SMITH 


The Changing Face of 
Information Security 


ACKING, CRACKING, global worms and 
viruses, netspionage, social engineering, 
internal theft, employees with malicious 
intent, physical terrorism and cyber- 
terrorism — these are just some of the 


security challenges organi- 
zations face. All the ways 
we have allowed data to be 
shared have made unde- 
tected theft of sensitive in- 
formation exponentially 
easier. While efforts to ex- 
tend data to the edge of the 
organization for productiv- 
ity’s sake have succeeded 
beyond our expectations, 
attempts to secure that data 
have failed miserably. 
We are starting to realize 
that information security is 
a process in support of the 
organization, requiring an 
understanding of the forces that drive 
business both internally and external- 
ly. A security program can be designed 
to effectively withstand business 


change only when the organization and | 
| every dollar spent on technology gets 
| them closer to their compliance goals. 


the IT department work cooperatively. 


Security Blunders 

Organizations usually react to threats 
by implementing some new piece of 
defensive technology, but while that 
may appear to be the quick solution, it 
is often the last thing you should do. 
Technology without proper strategy 
and business value can actually leave 
you more vulnerable. 

One publicly traded company re- 
designed and replaced its firewalls be- 
fore it acquired another publicly trad- 
ed company. The parent company was 
focused on shoring up its infrastruc- 
ture, but it failed to concern itself with 
the new organization’s environment 
prior to purchase. 

In this case, the first dollar the pur- 
chased company transacted after the 





merger put the parent 
company at risk. All the 
parent company’s security 
precautions were in vain, 
since it had not taken into 
consideration the security 
controls of the company it 
was acquiring. And the 
CEO and CFO were liable 
for all noncompliance is- 
sues in both companies. 


Building a Compliant 

Organization 

The introduction of merg- 

ers or mandates like the 

Sarbanes-Oxley Act com- 
plicate security, and organizations 
need to develop programs that take 


| them into account. With compliance 


taking a big bite out of IT budgets, 
companies need to make sure that 


Business-driven, top-down strategies 
are far better than the typical ground- 
up approach of reacting to threats. 


| Here are some tips for doing this right: 


® Understand and fully interpret the 


| governance and compliance issues you 


are faced with today. Realize that you 


| may be subject to multiple mandates 
| (Sarbanes-Oxley, HIPAA and Califor- 


nia’s SB 1386, for example) and that it’s 


| important to understand all of them be- 


fore planning to address any single one. 
= Employ an external organization 


| to provide a baseline or “gap” study of 


your environment that includes re- 
viewing your compliance drivers, un- 
derstanding your security environ- 
ment as it stands today and prioritiz- 
ing recommendations. Engaging a con- 





| 
| 


| 
| 
| 
| 
| 
| 
| 


tractor to do this sidesteps internal 
politics that could get in the way of ex- 
posing security gaps. 

@ Once a gap is identified, have a 
conversation with management about 
how IT will deliver process and tech- 
nology to address the business issue of 
compliance. Get management buy-in. 

® Create a compliance road map. 


| Specifically address how best to solve 


each compliance problem through the 
chosen combination of technology, 
processes and documentation. 

® Build incident detection, monitor- 


| ing and response programs, realizing 


that the optimal security environment 
starts with a clean slate, not with the 
addition of more technology to an 


| existing mess. 


®@ Develop security awareness and 
training programs, then prepare all 
employees to understand their securi- 


| ty responsibilities. 


Closing the Gap 
How will the changing face of informa- 
tion security affect the corporation, and 


| how do we establish an effective busi- 
| ness strategy to help it evolve? You 


must realize that technology alone will 
solve nothing and recognize that secu- 


| rity requirements have evolved from a 


technology issue to a business issue. 

This change requires challenging 
and rethinking the traditional ap- 
proach to security. Organizations need 
to see security as a business objective, 
or even as an enabler of new technolo- 
gy initiatives, rather than as something 
forced upon them. This requires com- 
munication among business units to 
develop an environment that is com- 
pliant-ready and a culture that is secu- 
rity-aware. Only by taking a proactive 
approach that recognizes that security 
extends beyond IT will companies stay 
ahead of game. @ 48649 
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IT Careers: Illinois, Chicagoland Bridge Old to New Industry Age 


° an era past, Chicago and the state of Illinois 
claimed fame in meat packing, transportation, 
heavy machinery, brewing, and corn. Today's 
economy is based squarely on technology with more 
than 7,000 IT-specific companies and a host of heavy 
IT users ranging from Baxter International to Argonne 
National Laboratory. 


While most Illinois technology companies were 
hiring in the hundreds in the 1990s, 2004 shows 
listings in much smaller numbers -- 40 to 50 
specialized professionals for larger firms and five to 
10 for dozens of smaller companies -- for entry level 
and senior management IT jobs. Allstate insurance, 
long a leader in information technology use, has 
better than 40 IT jobs listed on its website, while food 
giant Archer Daniels Midland has listings that include 
bioinformatics, application support, analysis and 
opportunities for academic interns. 


Among the coups for Illinois and Chicago was 
the announcement in fall 2003 that Chicago's 
McCormick Place will host the 2006 Biotechnology 
Industry Organization International Conference 
and Exhibition. State leaders point to the win as host 
site as an indicator of leadership in biomedical device 
development, pharmaceuticals, agri-science, bio 
remediation, and research and development 
innovation. 


However, the region is also known for a heavy 
load of consulting talent, ranging from giants 
Accenture, Mercer and Hewitt to locally operated 
firms. Crain's Chicago Business lists its technology 


NovaSoft information Techn- 
ology Corp., a software consult team or be able to independent- 
ing firm & web development co. ly design, develop, code, test & 
S seeking Programmer Analysts debug new SW or make signifi- 

2 following sets of cant enhancements to existing 
SW of moderate complexity 
using knowledge of Oracle 6.0 - 
8.x; Unix shell script, C++ 
Javascript, HTML, SQL, PL 
SQL; Oracle Developer 2000 & 
Oracle Designer 2000. Develop 
solutions across many disci- 
plines & be responsible for 
explaining solutions & proce- 
dures. Apply principies, theories 


Lead SW Dev Engineer - Lead a 


ions to work in the 


"2 yrs exp. designing/devel 
apps using SQL Server, Visual 
nterdev 6.0, VB 6.0, ASP, 
JavaScript & HTML 


1 yr exp. designing/devel. apps 
us Lotus Notes, Domino & 


who's who as Michael Birck, soon-to-retire CEO of 
Tellabs; Robert Blackwell Sr, CEO of Blackwell 
Consulting Services, John Edwardson, CEO of CDW 
Corp., Richard A. Forsythe, CEO of Forsythe 
Technology Inc., Gale E. Sayers (yes the football 
great), CEO of Sayers Group LLC, and Judith A. 
Sprieser, CEO of three-year-old data synchronization 
firm Transora Inc. In addition to these home-grown IT 
and software development groups, the listing 
includes Carol Potts, area vice president for Hewlett- 
Packard, and Allan Duffy Gaynor, a global business 
segment leader for IBM. 


The trend with these, and others such as Allstate 
Insurance, Archer Daniels Midland, Motorola and 
Baxter International, is in hiring people with specific, 
advanced skills such as IT architecture, analysis, 
development and disaster recovery, as well as IT 
support — in smaller numbers, but still hiring. 


The jobs are clustered in the Chicago area, 
Springfield and east of St. Louis, as well as a software 
development core that is scattered throughout rural 
Illinois, including the Carbondale/Southern Illinois 
University region. According to John Barr, project 
manager for the IT Cluster in Illinois’ Department 
of Commerce, the state’s IT strength is in 
hardware/networking, software and data services. 
Software has grown at the fastest pace, with total 
employment increasing by better than 90% in the 
past decade, driven by growth with companies such 
as Platinum Technology, SPSS, SoftNet Technologies 
and Spyglass. 


Software Engineer - Applic- 
ations. Sought by Englewood 
Colorado consulting company to 
work in various unanticipated 
locations throughout the U.S 
Duties: Develop, create and 
modify general computer appli- 
cations software or specialized 
utility programs. Analyze user 
needs and develop software 
solutions. Design software or 
customize software for client use 
with the aim of optimizing opera- 


Senior Software Architect 
Delray Beach, Florida: Analyses 
existing functionality and pro- 
gramming of current system and 
evaluates client requirements for 
new or modified software sys- 
tem. Within time and cost con- 
straints analyzes, researches, 
designs, develops, and cus- 
tomizes in Unix financial appli- 
cations in a client-server envi- 
ronment utilizing Shell Scripting, 
C/C++, SQL. Motif, Perl and 
SYBASE Prepares, plans. 
develops, codes, implements 


Windows NT, & setting up 
Domino Servers & Lotus Notes 
on Windows NT 


*2 yrs exp. devel./testing strate- 
gies using Test Manager. 
Rationai Clear Quest, Rational 
Clear Case, WinRunner & 
LoadRunner 


BS in Comp. Sci., CIS, Engrg 
Electronics, Busns or Math + 2 
yrs exp. as a Prog. Analyst 
Sftwr Engr, Syst. Analyst 
Consultant or QA Analyst/Engr 
rqd. Excellent salry/benfts pkg 
Send resumes to: NovaSoft 
Information Technology Corp., 
ATTN: HR Dept 8400 
Normandale Lake Bivd, Ste 920, 
Bloomington, MN 55437 


Database Analyst. Design, 
implement, maintain data- 
base, web pages, software 
tools and documentation for 
marketing and financial soft- 
ware applications. Must have 
Bachelor's in Information 
Systems, Accounting or relat- 
ed, 1 yr. exp. and knowledge 
of Microsoft SQL database 
programming, ASP program- 
ming, C, Visual Basic, HTML 
and Java programming. Send 
resume to Infinity Investments 
Inc., Attn: Jim Balvanz, 373) 
Collins Rd. NE, Cedar 
Rapids, IA 52402 


& concepts & use methodolo- 
gies tools, documentation 
processes & test procedures to 
complete projects related to 
moderately compiex SW. BS in 
Comp. Sci, Engin. or related 
field & 3 yrs exp & working/theo: 
retical knowledge of DB 
Development/Admin in Oracle 
6.0-8.x; Programming using 
Unix Shell Script, C++, Java- 
script, HTML, SQL, PL/SQL, & 
Oracle Developer 2000/Oracle 
Designer 2000. $73,333/yr. M-F. 
40 hrs/wk. Denver, CO. Must 
have proof of legal authority to 
work permanently in U.S. 
Application by resume only to 
Workforce Development Prog- 
rams, PO Box 46547, Denver, 
co 80202 Ref  job# 
COS088677 


S/W Engineers to analyze, de- 
sign business appis for SAP 
R/3, ABAP, Workflow, C, C++. 
Java, VB, Oracle, SQL, etc 
under Windows, UNIX OS; ana- 
lyze business processes to 
determine reqs & generate re- 
ports; prepare documents, flow 
charts and programming specs; 
create app! prototypes for client 
approval and rapid app! devel- 
opment; train users in business 
appl usage. Require: MS or for- 
eign equiv. in CS/Engg. (any 
branch)/Math & 1 yr exp in IT. 
High salary. F/T position. Travel 
Required. Resume to HR, 
Smartsoft International, inc., 
3965 Johns Creek Court, 
Suwanee, GA 30024. 


tional efficiency. Analyze and 
design databases with an appli- 
cation area. Use of Oracle 
JavaScript Perl Sybase, 
Intershop, ASP, HTML, SQL and 
Windows NT. Reqs. Masters or 
equivalent in Computer Science, 
Computer Engineering, Engin- 
eering (any field) or related field 
Plus 1 year in the job offered or 
1 year in a related occupation, 
including Programmer Analyst, 
Internet Specialist or Prog- 
rammer $75,000/year, 40/hrs/ 
wk, 9AM-5PM. Respond by 
resume to WORKFORCE DEV- 
ELOPMENT PROGRAMS, PO 
Box 46547, Denver, CO 80202, 
and refer to Job Order No. CO 
5086067 


Computer Support Specialist 


To support multiplatform com- 
puter hardware and software 
systems users in PC and Unix 
environment and maintain the 
company's NT Servers and web- 
site. Require B.S. in Computer 
Information Systems, Computer 
Engineering or closely related 
field and proficiency in both 
Windows and Unix operating 
systems and in ASP, ASP.NET & 
SQL Server. 40hrs/wk. Send 
resume &cover to HR, HGS 
Engineering, Inc., 1121 Noble 
Street, Anniston, AL 36201. Job 
Code: AL-KS. 


and documents software sys- 
tems using detailed design doc- 
uments, object models and data 
flow diagrams including data 
Structure, algorithm and proce- 
dure flow Requirements 
Master degree in one of the fol- 
lowing: Computer Science/ 
Engineering Mathematics, 
Computational Science or relat- 
ed area and two years experi- 
ence in the job offered or a Ph. D 
degree and six months experi- 
ence. Wages Offered: $185,000 
per year. Hours: 40 hrs per 
week: Monday to Friday, 9:00am 
to 6:00pm. Send resume to 
Workforce Program Support, 
P.O. Box 10869, Tallahassee, FL 
32302-0869, Att: EH., Job Order 
FL-2526398 


Stanford Technology Partners 
Inc. is an IT consulting company 
with its clients across the USA. 
We seek a Peoplesoft EPM 
Functional Consultant. 

include reporting tool selection; 
Identifying legacy system report- 
ing & architecture; conceptual 
oe of hardware configurations 
for Peoplesoft reporting tools; 
creating conceptual design docs; 
assisting staff on docs, identify- 
ing gaps in source system, pre- 
sent EPM module to mgmt and 
team members for review and 
implantation. Job is located in 
Tallassee, Florida or unanticipat- 
ed locations throughout the USA. 
If interested, please send resu- 
me to: STPI, 289 Boston Tpke #6 
Shrewsbury, MA 01545 e-mail 
fecruiter@stpincusa.com 


INFORMATION 
TECHNOLOGY 
ESTABLISHMENTS 


@ Data Processing 


@ Hardware & 
Networking 


O Software 


source: 
_ State of Illinois, DCOE 


SHOMEX, long known for its diversity job fairs, is 
launching a new regional-focused product to meet 
technology-hiring requirements. The first show, 
according to Cris Levy, vice president of marketing, is 
Jan. 19 at the Navy Pier in Chicago. More than 30 
companies are expected to participate in the job fair. 


For more information about IT Careers advertising, 
please contact: Nancy Percival 

Vice President, Recruitment Advertising 
800.762.2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 


R Systems, Inc. is a global infor- 
mation technology services 
company and it has multiple Job 
openings for the following posi- 
tions at its corporate office in 
Sacramento as well as Project 
sites throughout the 
United States 


* Applications Programmer 
* Database Analyst 

* Software Engineers 

* Systems Analyst 

* Network Analyst 

+ IT Project Managers 

* Business Analyst 

* Sales Engineer 

+ Programmer Analyst 

+ Sales Manager 

+ Database Administrators 
+ Market Research Analyst 


shire 


right skills 


Minimum requirement: Bach- 
elor’s degree or equivalent and 
one year experience in the job 
offered. All positions may involve 
relocation to project sites 


atta 


Submit detailed resume and 
position applied for to. 


Attn: Venkatesh Sundararajan 
5000 Windplay Drive Suite 5 
El Dorado Hills, CA 95762 


the new 


Programmer Analyst, auto 
parts export. Evaluate user 
req & implement specialized 
computer programs, inc inven- 
tory, US & export, customs & 
fiscal req, SBT accounting 
system in visual fox pro lan- 
guage, warranty/defect con- 
trol, & pricing/cost analysis/ 
availability. M-F 9-5 $51,000 
yr. Bachelor in computer field 
or equiv ed & exp & 2 yrs exp. 
Resume to Workforce Pro- 
gram Support, PO Box 10869, 
Tallahassee, FL 32302-0869. 
Re: Job Order #FL2544978. 


economy. 


itcareers.com 
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IT Careers 


Wants You! 


job searching and 


check us out at 


www.itcareers.com. 


the right skills fuel the 


new economy and IT 


eers wants you to be 


there. Check us out at: | 


www.itcareers.com 
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SOFTWARE ENGNR, APPLNS 


Dvip, create & modify web- 
based computer work sys. fol 
lowing a life-cycle 
protocol Dsgn 
appins to optimi 

Analyz 


B 


reqd + 3 yrs e 
offered or as a 
or Prog. Analyst. Exp. must inc! 
Microsoft.net too! technologies 
like ASP.net, C#, VB.net, SQL 
Server 2000, XML/XSL utilizin 
tS & component dsgn & dvit 
nt using Visual Ba 

5pm 
$66,730/yr. Submit resumes t 
Mon Valley Regiona! 
Link, Attn: Actg. CL 
Supervisor, Donora 
Park, 570 Galiffa D 
PA 15033. Refer t 
No. 445142 


Senior Programmer 

lead teams to analyze, design 
develop, implement appls using 
SAP, C, J2EE, JSP, RMI, Web- 
sphere, Weblogic, < to 
like Mercator, Sybase, Vitria 
Webmethods, etc under Win- 
dows/Unix OS; responsible for 
data modeling, gap analysis 
etc; involve in system/business 
analysis; develop functional 
specs based on business reqs: 
design, develop interfaces and 
perform integration of variou 
modules; test team members. 
train end users. Require: BS or 
foreign equiv in CS/Engg. (any 
branch) & 3 yrs exp in the IT 
fieid. Travel involved. F/T posi- 
tion. competitive salary. Resume 
to: HR oneru Software 
Services, 333 Swanson Dr. 


124, Lawrenceville, GA 3 


Multiple op g 

mer/Systems Analysts 

Engineers: M 

Com Sci or re! 

exp in require 

sign and developm 

the technical issues W/exp in 

two or more of the lowing 

skills: Oracle Applications (GL 

AP, AR, FA, PO, INV, OM, CM 

BOM modules ver 11/11i) Oracle 

Reports, forms, Discoverer 

Unix, Solaris, C/C++, JAVA 

XML, PeopleSoft, Cognos, Win 

Load Runner, DB2, PLSQL, MS 

SQL, Sybase, PB, VB, ASP, 
Windows. Resumes t 


emails: resumes@z3t 


Programmer Analyst 
implement, edit 
user application 
le-shoot, cor 
pr 
Bache 


Corba. 40hr/wk 
p.m. Send resume 
International, Inc 


Norcross Road 


Lawrenceville, GA 30( 


Need IT Professionals like 
Software Engineers, Program- 
mer Analysts, IT Business 
Managers for company based 
in Bristol, PA. MS/BS Degree 
or equivalent in C.S, CiS, MIS 
Engg (any), Math, Phy. / rel 
field and/or rel. work exp. All 
positions may involve travel 
&/or relocation to project sites 
throughout the US. Mail 
resumes to HR at Systems 
People c 1200 New 
Rodgers Road, C 7B, Bristol 
PA 19007 State the post 
applied for 
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Computer Solutions A 


JOIN THE $300 BILLION 
COMPUTER SERVICE BUSINESS. 


“HOT 100 


ach decal 


eT eal 


Database Consultant/Software 
Engineer to serve as senior con- 
sultant to provide strategic tech 
leadership for data architecture 
across Co's systems & market 
data services. Will initiate, pian 
& implement compiex database 
development projects, providing 
jirection for DBMS operational 
& warehousing methods & tools 
research DBMS technology; rec- 
smmend changes in project 
development methods & strate- 
gies to architects & manage- 
ment. Req Bachelor's or 
equiv C.S Engineering 
Math ySics p 
per in job offered, OR 6 years in 
Database Administration; Alter- 
natively, will accept N 
plus 8 yrs of e 
OR 8 yrs 
tration. C 2 ust also 
possess demonstrated expertise 
n DB2 administration, incl 
UDB, AIX, and SOLARIS, and 
ion ina ro latency 
environme dem 


S 6 yrs ex- 


No degree 


trated ex- 

pertise in ORACLE administra- 

ti g PL/SQL program- 
g, performance ng 

sptimization; and demo 

expertise ir 

tecture, including actuate re 

ing L tools & operational 

storage analysis. Sal: $94 

yr, M-F, 9A-5P. Send 2 


EOE. Applicants must 
workers eligible ac 
e U.S. employment 


IndusValley Consultants 
a globai 
and solutions 
for the following 
Research, Architect, Inte- 
Jistr 4 applicatio ti 
s software's si 
Clarify, Siebel 
sual Basic, Java 
eadership 
lutions, write ci 
provid 
mpleme > 
Need Master 
omputer Science 
and 2 years of exper 
C Programmer Ana 
Plan, test anc 
ations for ERP and, CRM pack 
sign and devel 
applications using 
ASP, VB, C, Clarify, Siebe 
AutoCAD2002. Interact with 
ents to design the functions 
software according to client 
cificauons Need Bachelor's C 
gree in Computer Science 
related and 2 years of exper 
ence Send resume: HR Mana 
ger 401 E 8th St., Ste. # 200Y 
Sioux Falls SD 57103 
E-mail. sam@Indusvailley.com 
fax 800-440-1907 


IT PROFESSIONALS 


Senior nsultanUTechnolc 
Solutions 


Glen Mills, Pennsyivan 
other locations throughout 
US.). Design and imp 
leading business applicatio 
tware to provide solutio 
ents focusing in the man 

ig and consumer business ind- 
ustries. Engage in design and 
implementation rocess and 
techn y solutions for supe 
chain - 
plannir 
management u 
ness, customer management 
and business intelligence. Scope 
and plan function 
along with design 
customization an 


Industry 


firm & web de 
seeking a Program 
to work in the Mi 


who will be respons 


solutions 

Netware 

IPX/SPX, & 2 

busns requirements analysis 
Excel. saiary/benefits pkg. Send 
resumes to NovaSoft Infor 
mation Technology Corp., ATTN 
HR Dept., 8400 Normandale 
Lake Bivd Ste 
Bloomington, MN 55437 to jobs_wy@daiamanusa.com 


elocate/trave 


Cheyenne, W) 00 r email 
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IT PROFESSIONALS 
Senior Consultant 


(Glen Mills, PA and other locations throughout the United States). Provide 
professional consulting services in the areas of business process trans- 
formation and implementation of integrated software solutions to meet 
evolving business needs. Review and analyze client business process 
requirements, determine optimal integration of business process engi- 
neering and emerging information technologies, and propose strategic 
solutions and business process improvements including benchmarking 
and design analysis. Lead the design and implementation of mySAP.com 
EBP such as BugsEys/eMerge Catalog management tools including SAP 
MM (Materials Management) & PP (Production Planning), SAP Business 
Warehouse and SAP SD (Sales & Distribution) & WM (Warehouse 
Management), to provide best-of-breed functionality built for complete 
integration, industry-specific capabilities, unlimited scalability, and easy 
collaboration over the internet. Lead the implementation of mySAP.com 
middleware technologies such as SAP Business Connectors, ALE 
(Application Link Enabling), BAP!, and iDOC to provide a program distri- 
bution model and technology that enables clients to interconnect pro- 
grams across various platforms and systems. Implement project man- 
agement tools and create and apply solution specific methodologies to 
ensure that the delivery and implementation of software solutions meets 
client requirements and industry standards 


$103,000/year. Mon-Fri 9:00am-5:00pm. The minimum requirements are 
as follows: Bachelor's degree or equivalent in Computer Science, Engin- 
eering (any), or Information Systems pius 4 years of experience in the job 
offered or 4 years of experience as a Senior Consultant, SAP Consultant, 
or Executive. Employer will regard a foreign degree to be equivalent to a 
U.S. Bachelor's degree as determined by an accredited foreign creden- 
tials evaluation service. Related experience must also include 2 years of 
mySAP.com EBP, SAP MM (Materials Management) & PP (Production 
Planning), SAP Business Warehouse, SAP SD (Sales & Distribution) & 
WM (Warehouse Management), mySAP.com middleware technologies & 
project management tools. 


Please send your resume, referencing Job Order Number WEB444883 to 
the: PA CareerLink, FLC Unit, 235 W. Chelten Avenue, Philadelphia, PA 
19144, EOE 


QA Engineer Req #608Design 
and develop Dynamics quality 
assurance test applications us- 
ing 4GL, ADM2, Dynamics Tools 
and distributed computing tech- 
nologies. Install and configure 
applications in both Windows 
and Sun operating systems 
Assist technical support person- 
nel with product issues; validate 
product defects and report using 
internal defect tracking system 
Must have B.S. in CS + 5 yrs 
exp. or M.S. + 6 mos. exp. in 
software development. Must 
have knowledge of Java, XML 
OOP, RDBMS, PROGRESS 
4GL, ADM Tools and Dynamics. 
Interested applicants should 
submit resume to S. Fernandois 
Progress Software Corp. 14 Oak 
Park, Bedford, MA 01730 
Equal Opportunity Employer 
For immediate consideration 
please visit our career page at 
http://careers.peopleclick.com 

nt40_ProgressSoftware 
BU1/External_Pages_PSC/Job 
search.htm and apply online, re- 
ferring to the requisition # for the 
position for which you are apply- 
ing 


Jr. Programmer Analyst. Assist 
PA. in researching, designing 
and developing s/w for various 
business problems using J2EE 
and object-oriented design prin- 
ciples and technologies incl 
UML and Waterfall models, and 
RUP process. Assist in testing 
s/w solutions using Java, J2EE. 
JSP, Struts, Serviets, Swing on 
Unix and windows NT. Assist in 
developing s/w for SQL Queries 
and stored procedures on SQL 
Server and Oracle. Provide test 
cases and other doc. in CMM 5 
standards. Req: BS in comp. 
Sci., Comp. Eng., or Elect. Eng 
40hrs/wk. Job/Interview Site: De 
Moines, !A. Send Resumes to 
Emprise Consulting LLC, Attn 
Chuck Gutta, 2915 Redhill Ave. 
# F202, Costa Mesa, CA 92626 


Principal Software Engineer: Pri- 
mary responsibility for the devel- 
opment of networking software 
Responsible for functional spec 
dev, arch design, implementa- 
tion and verification. MS or for- 
eign equiv. in EE or CS plus 5 yr. 
exp. that must include 3 yr. with 
one or more network protocols 
including IP, TCP, ARP, DHCP, 
DNS, SNMP.and firewall. . Must 
be familiar with IP QOS proto- 
cols and RFCs. Must have dev- 
elopment exp. with Linux. and in 
C/C++. Please send resume to 
Ucentric Systems, 2 Clock Tow- 
er Place, Suite 550, Maynard 
MA 01754, Attn to Pat Riley. 


Jr. Programmer Analyst. Assist 
P.A. in researching, designing 
and developing s/w for integrat- 
ed Business-to-Business proto- 
col interfaces using middleware 
SeeBeyond e*Gate integrator 
suite and diverse sys. w/in an 
enterprise using message based 
brokering s/w. Test s/w on ALX 
servers and fine tune app. using 
various UNIX memory mgmt 
tools.Assist in creating and ana- 
lyzing data back up scripts and 
in UNIX. Assist in bidg. real time 
and batch mode J2EE comp. 
app. using J2EE technologies 
such as serviets, JSPs, JMS. 
JNDI, and JDBC and app. 
servers, which include IBM 
Websphere, BEA Weblogic and 
Apache Tomcat. Req: BS in 
comp. Info. Sys., comp. Sci., or 
related area 40hrs/wk 
Job/interview Site: Des Moines. 
IA. Send resumet to Chuck 
Gutta, Emprise Consulting LLC 
@ 2915 Redhill Ave. # F202 
Costa Mesa, CA 92626 


Seeking qualified applicants for 
the following positions in Collier- 
vilie, TN: Senior Project/Process 
Analyst. Perform project plan- 
ning and analysis and provide 
project leadership for IT pro- 
jects, processes and/or on-going 
programs. Requirements: Ba 
chelor’s degree or equivalent* in 
business, computer science, 
MIS or related field plus 5 years 
of experience in planning, pro- 
ject management or process 
analysis of IT projects. Experi- 
ence with: either SQL, ASP or 
CSP; either Crystal Reports or 
Crystal Enterprises; and Win- 
dows 2000 Server also required. 
“Master's degree in appropriate 
field will offset 2 years of gener- 
al experience. Submit resumes 
to Roger Wright, FedEx Corpor- 
ate Services, 80 FedEx Park- 
way, Room 108, Collierville, TN 
38017. EOE M/F/D/V. 


Business Analysts to gather, an- 
alyze, document, propose sys: 
tems solutions; lead JAD sess- 
ions to analyze, define user busi- 
ness reqs, process descriptions, 
use cases, scenarios using ratio- 
nal rose, visio etc.; re-engineer 
business processes/procedures, 
define/documeni data models 
using SSAD, OOAD, RUP meth- 
odologies; analyze system per- 
formance to understand excep- 
tions, anomalies, problem areas 
provide direction/assist project 
teams; Require Bachelors in 
Business/Mgmt/CS/Engineering 
with 2 yrs or related exp. Compe- 
titive salary. Travel involved. F/T. 
Resume to: HR, Bahwan 
Cybertek Technologies, Inc., 209 
West Central Street, Ste 312, 
Natick, MA 01760 
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MagnaQuest, Inc. 


Programmer Analysts: Design, 
develop and test Internet based 
programs for EBPP packages. 
Electronic Billing Presentation 
and Payment. Design client- 
server applications using JAVA. 
EJB, NetDynamics and Oracle 
Interact with clients to design 
the functions of software ac 
cording to client specifications 
using Unix, C++, Corba, XML 
UML, WEBLOGIC 7, testing 
tools. Req. Bachelor's degree 
in Computer Science or Engg 
and 1 year of exp. Send 
resume to: HR, MagnaQuest. 
Inc., 16219 S. 31st Way, 
Phoenix, AZ 85048. E-mail 
mqusa@magnaquest.net 


System/Programmer analysts 
IT engineers needed by E IT 
professionals, Inc. to design 
system applications meet 
client's requirements using 
Java, Oracle, VB, Web Tech 
Unix, SQL, SAP, JSP, J2EE, MS 
Tech, etc. BS/MS with IT exp 
required. Contact 

pete@itprofs.net. EOE. No calls. 


OTS (Object Tech Solutions) 
has multiple openings for IT pro- 
fessionals (software engineers. 
system/program analysts, DBA 
etc) to design and develop appli- 
cations using various skills such 
as VB Oracle Java 
WebSphere, SQL, SAP. Req 
MS/BS_ with exp. Contact 
resumes@otsi-usa.com. EOE 


Paradigm Technologies is look- 
ing for program/system analysts. 
DBA, s/w engineers. Candidates 
must have BS/MS with experi- 
ence. Good skills in C/C++ 
Java, Oracle, WebLogic, VB. 
HTML, ERP are plus. Traveling 
required for some jobs. Please 
apply at jobs@paradigmtek.com. 
EOE. No calls 

Stryon, a leader that provides 
Software Transformation 
Soiutions, looks for IT profes- 
sionals to develop our own 
migration products, iNET and 
iASP & our bridging middleware 
products, iHUB and R-JAX 
Must have BS/MS with IT exp 
Please send resumes to 
contact@stryon.com. EOE 


I want a qualified 
IT professional 
in my staff’s 
high-performance 
work 
environment 


The 
IT Careers Network 
will focus and direct 
your message to IT's 
most impressive audience 
— the experts who are 
helping business to 


succeed. 


Post open positions 
online or in print. 


Call (800) 762-2977 
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Sage IT is looking for IT profes- 
sionals to develop applicatiors 
using Cognos Impromptu. 
PowerPlay, ReportNet, SQL, 
Oracle, Tera data (NCR), Sybase. 
Esbase, DB2, Red Bricks 
Informatica, Data Stage, Ab Initio, 
Web Logic/Sphere, JSP, ASP. 
Min. BS w/ exp. Please contact 
info@sageitinc.com. EOE 


Global Consulting is looking for 
Programmer/system analysts. 
software engineers. Candidate 
must have BS with IT experience. 
Good skills in C/C++, Java 
Oracle, EJB, J2BB, WebLogic. 
VB, HTML are plus. Traveling is 
required for some positions. 
Apply job@g-c-g.net EOE. No 
calls 


Systems Analyst sought by large 
employer in Electronic Print 
Svcs Industry. Reqs BS in Engg. 
CS or MIS. Min. 2 yrs IS exp in a 
high speed digital print technolo- 
gy envrmt & using document 
print/print image formats incl 
Xerox Meta/code & DJDE, IBM 
AFP, Adobe PDF, fonts, bar- 
codes, font edit tools, document 
dsgn tools. Min. 2 yrs exp using 
Process Automation on multiple 
platforms (IBM MVS, Window, 
Unix, HS Printers). Min. 2 yrs 
exp w/VC++, VB, MS Access, 
SQL, MicroTech, IMR Alchemy, 
Elixir & CompuSet. M-F 8-5 
Respond to Scott Erickson, HR 
Mgr, Moore Wallace, Business 
Communication Svcs, 630 W. 
1000 North, Logan, UT 84321 


eToys Direct seeks applicants 
for the position of Web 
Applications Developer in 
Denver, CO to design and devel- 
op custom web-based software 
applications Requirements 
include bachelor's in computer 
science or related field and 
experience in designing and 
developing web-based appiica- 
tions. Requirements also include 
working knowledge of TCL/TK. 
Expect Programming Language. 
Oracle Development and Python 
Scripting Language. Respond 
by resume to Gigi Healy, eToys 
Direct, 1099 18th St. #1800. 
Denver, CO 80202 


Database Aps Engr - Design 
develop, & impli. RDBMS util 
SQL & multi-tiered distributed 
apps util. VB, ASP, & HTML/XML 
to run on Windows NT o/s. Prov- 
ide on-site info. systems consul- 
ting to corp. clients in order to 
maximize info. system efficien- 
cy. REQS: MS in CS, Math, Phy- 
sics, or any Engineering discip- 
line, + 2 yrs of exp in job offered, 
or 2 yrs of exp as a Database 
Admin. or Database Design 
Analyst. Salary: $65,000 to 
$80,000, DOE. Incl. benes, 40 
hrs/wk. EOE. Job loc: Various 
unanticipated locations through- 
out U.S. Apply by resume only 
to: Job #CO5087982, Workforce 
Development Programs, P.O 
Box 46547,Denver, CO 80202 


Computer Support Special- 
ists - needed for various 
unanticipated locations in 
US to support clients’ tech- 
nical efforts in building and 
configuring computer sys- 
tems, performing network 
admin and hardware trou- 
bleshooting. BS in Mech- 
anical/Electrical Eng reqd 
40 hr/wk, $20+/hr. Send 
resume wi ad to Ms. Shipe, 
OAO Services, 2266 South 
Dobson Rd, #209, Mesa, 
AZ 85202. 


IT PROFESSIONALS 
Senior Consultant 


(Glen Mills, PA and other locations throughout the United States). Respo- 
nsible for Siebel software development tasks associated with the design 
and development for customization of Siebel applications. Develop Siebel 
objects including creation of business components, business objects 
applets, views and screens. Develop Siebel Enterprise integration objects 
enabling Siebel to integrate with other systems including SAP and Oracle 
utilizing Siebel Enterprise Integration modules. Create integration objects 
workflow processes and data mappers and develop business services to 
incorporate the required logics. Test workflows and utilize various Siebel 
connectors and adapters enabling Siebel to communic; with middle- 
ware technologies and other applications. Utilize Siebel E 

ration Manager to load data into Siebel from other legacy 

tems. Prepare data sheets as per table requirements, wr 

run SQL loader scripts to load data in the interface tables and cre 

er tasks to run the Enterprise Integration Manager process. De 

egy documents for proposed technical solutions, design deliverables 
develop documents, and write test scripts and test plans. Responsible for 
the scoping and mapping of operational reporting requireme 10 Actuate 
Siebel reports with report parameters/filters, and design the ate Sieb- 
el reports. Lead data integration, and oversee data conversion and appli- 
cation configuration efforts including leading a team of Siebel developers. 
Perform the analysis of existing business and system use S and re 
quirements documentation. Perform accurate analysis and effective diag- 
nosis of client issues and oversee day-to-day client relationships on client 
engagements. implement project management tools and create and ap- 
ply solution specific methodologies to ensure that the d ry and imple- 
mentation of software solutions meets client requirements and industry 
standards. 

$82,650/year. Mon-Fri 9:00am-5:00pm. The minimum requirements are 
as follows: Bachelor's degree or equivalent in Computer Scie Engin- 
eering (any), Information Systems, Mathematics, or Business Administra- 
tion plus 5 years of experience in the job offered or 5 years of experience 
as a Senior Consultant, Consultant, or Software Engineer. Employer will 
regard a foreign degree to be equivalent to a U.S. Bachelor's degree as 
determined by an accredited foreign credentials evaluation serv 

ed experience must also include at least 1 year of Siebel app 
velopment, Siebei enterprise integration development, utilization of Si 
Enterprise Integration Manager, integration of Siebel with other < 

tions including SAP or Oracie and development of Actuate Siebel reports 
Please send your resume, referencing Job Order Number WEB444901 to 
the: PA CareerLink, FLC Unit, 235 W. Chelten Avenue, Philadelphia, PA 
19144. EOE 


Systems Analyst w/SCSA need- Programmer 1. Under supervi 
ed at client sites to dsgn, dvip sion, design a 

code, test, debug, modify & applications and d 
impimt prgms; provide Tier 3 port tools using Java, JSP and 
support of Web, Mail, DNS & stored procedures development 
Provisioning Internet services: environment: maintain and ov- 
dsgn & impimt high-availabLe ersee the coding standards 
Unix systms; toois inci: JDK 
Perl CGi, HTML, Veritas Volume 


mplement 


tabase sup 


provide te cal support for 
resolution of customer issues 


Manager & Cluster Server, Net- 
backup, CheckPoint Firewall 
Cisco Routers, Foundry Switch- 
es, TCP/IP networks, Sun E420 
SunE250, Solaris, RedHat 
Oracle, Sun StorEdge A5200. 
NETApp F7' DNS, NIS & 
NFS. Apply to: Global Consult- 
ants, Attn: Hireme, 25 Airport 
Rd, Morristown, NJ 07960. 


Computer Programmers need- 
ed. Seeking qual. candidat 
possessing BS or equiv. and/or 
rel. work exp. Part of the req. rel 
work exp. must include 2 yrs 
working w/ Java and XML and 1 
year working with .Net; experi- 
ence can be simultaneous 
Duties include: Develop & write 
programs; Configure HW/SW 
Analyze & implement remote 
control of Software packages. 
Work with Java, SQL, Linux 
NET, & XML. Send res., ref. & 
sal req to Applianz 
Tachnologies, 322 S. Mosley 
Wichita, KS 67202 


Systems Administrators to plan. 
design, install, maintain and ad- 
minister LAN/WAN networks; in- 
stall, configure, administer Win- 
dows NT, liS & SQi Servers 
maintain backups and provide 
support for users; create, main- 
tain user accounts; manage 
communication systems includ- 
ing Mail servers; evaluate new) 
existing systems, recommend 
future IT strategies. Require: BS 
of foreign equiv. in CS 
Engg.(any dranch)/Buss. with 2 
yrs exp. in Sys Admin./Sys 
Mgmt. F/T. Travel Invoived. High 
Salary. Resumes to: HR, Fourth 
Technologies, inc., 585 Toligate 
Road, Ste |, Elgin, IL 60123. 
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and function as mentor to other 
Software Engineers on develop: 
ment standards and methodolo- 
gy. Must have Bachelor's in 
Computer ience O 
related, 1 yr. exp., and experi 
ence must include working with 
Java, JSP, Struts, XSLT, Web- 
sphere, ClearCase 
Rose and Crystal R 
Send resume to Praxis 

Attn. 


Des Moines, iA 50325 


Jr. Programmer Analyst. Assist 
PA in researching, designing 
and developing s/w for various 
business problems using J2EE 
and object - oriented design 
principles and technologies inci 
UML and Waterfali modeis and 
RUP process. Assist in testing 
s/w solutions using Java, J2EE 
JSP, Struts, Servelts, Swing on 
Unix and Windows NT. Assist in 
developing s/w for C 

and stored procec 

Server and Oracle. P' 

cases and other doc 

standards. Req : BS 

Sci., or mp. in 

Comp Eng 40 hrs/wk 
Job/interview site: De Moines 
1A. Send resume to Emprise 
Consulting LLC, Attn : Chuck 
Gutta, 2915 Redhill Ave., # 
F202, Costa Mesa, CA 92626. 


Controi Systems Designer 
wanted by construction sup- 
plies mftr in IL to dsgn spe- 
cial controlling systms/soft- 
ware, dsgn/diagram struc- 
tures & circuits. Provide s/ 
ware prgm reqmt specs 
eval control dsgn systm 
models w/physical models. 
Must have Bach or equiv in 
Comp Sci. Respond to: Mr. 
Bob Kuzy, Universal Form 
Clamp, Inc., 840 S. 25th 
Ave, Bellwood, IL 60104. No 
Calls. 





A global software development 
ompany headquartered in 
Newark, DE is seeking Software 
Engineers for Multiple Openings: 


Duties include: Research 
Nn and testing of sc 
applications. We have r 
positions available for 
skill sets which may i 
following: Oracle, Siebel, C, ( 
Crystal Reports, Sybase, DB2 
Visual Basic, MSAcoess, PL/SQL 
COBOL, JCL. CICS, Java, COGNOS 
PowerBuilder, XML, ASP. HTML on 
UNIX, Solaris, LINUX and 
Windows NT operat stems. 
All positions require the 
minimum of a Bachelor's Degree 
equivalent along with 
year of experience in the 
of software engineer. 
programmer analyst, software 
C ner, systems analyst 
or a related/equiva 
pation. Positions 
require extensive travel 
and/or relocation. 


Highly competitive salary offered 
between $52K and $55K. Send 
Delaware 
Department of Labor, Division of 
Employment and Training, 4425 
North Market Street, P.O.Box 

8, Wilmington, DE., 19809- 
0828. Please refer to Job Order 
# DE 205314 


resumes to 


A global software development 
company headquartered in 
Newark DE Ss seeking 
Advanced Software Engineers 
for Multiple Openings 


Duties include: Research 
ing of software 
le have multipie 

1S available for various 
li sets which may include the 
following: Oracle, C, C++ 

Cc Reports, DB2, Visual 
s, PL/SQL, SOL 

Server, COBOL, Java on UNIX 

Solaris, and Windows NT oper 

ating systems 


All positions require the 
minimum of a Bachelor's Degree 
or U.S. equivalent along with two to 
three years of experience 
in the position of software engi- 
neer, programmer analyst, software 
programmer, systems analyst, con- 
sultant or a related/equivalent 
xcoupation. Positions require 
extensive travel and/or 
relocation. 


Highly competitive salary offered 
at $84K. Send resumes to 
Delaware Department of Labor, 
Division of Employment and 
Training, 4425 North Market 
Street, P.O.Box 9828. 
Wilmington, DE., 19809-0828 
Please ar to Job Order 
# DE 205261 


PROGRAMMERIANALYST to 
analyze, design, develop, test 
mplement and support web 
based client/server application 
softwa using C, C++, Java 
H XML, JSP, Serviets, EJB 
CORBA, RMI, WebLogic, Web- 
Sphere Servers, Oracle and 
DB2 on AIX-UNIX and SUN 
Solaris platforms. Require: B.S 
degree in Computer Science: 
Engineering, or a closely related 
field with 2 yrs of exp in the job 
offered or as a Software Engin- 
eer. Extensive travel on assign- 
ment to various client sites with- 
in the U.S. is required. Competi- 
tive salary offered. Apply by 
resume to: Ravi Kandimalla 
Everest Computers Inc., 875 
Old Roswell Road, Ste E-400 
Roswell, GA 30076; Attn: Job 
GB 


IT|cCareers 


A global software development 
ompany headquartered in 
Newark, DE is seeking Software 
Engineers for Multiple Openings 


Duties include: Research 
design and testing of software 
applications. We have multipie 
positions available for various 
skill sets which may include the 
following: Oracle, Siebel, C, C++ 
Crystal Reports, Sybase, DB2 
Visual Basic 
OL, JCL, CICS, Java, COG- 
PowerBuilder, XML, ASP, 
HTML on UNIX, Solaris, LINUX 
and Windows NT operating sys- 
s 


All positions require the mini 
mum of a Bachelor's Degree or 
U.S. equivalent along with one 
and a half (1.5) years of experi 
in the position of software 
programmer analyst 
programmer, systems 
é consultant or a 
related/equivalent occupation 
Positions require exten- 
sive travel and/or relocation. 


ly competitive salary offered 

etween $54K and $56K. Send 
resumes to Delaware Department 
of Labor. Division of Employment 
and Training, 4425 North Market 
Street P.O.Box 9828 
Wilmington, DE., 19809-0828 
Piease refer to Job Order 
# DE 205265 


A global software development 
company headquartered in 
Newark DE is seeking 
Advanced Software Engineers 
for Multiple Openings 


Duties include: Research 
design and testing of software 
applications. We have multiple 
positions available for various 
skill sets which may include the 
following: Oracle, Visual Basic, 
SQL Server, Java on UNIX 
and Windows NT operating 
systems 


All positions require the 
minimum of a Master's Degree 
or U.S. equivaient along with 
one (1) year of experience in the 
position of software engineer, 
programmer analyst, software 
programmer, systems analyst 
consultant or a related/equiva- 
lent occupation. Positions 
require extensive travel 
and/or relocation. 


Highly competitive salary offered 
at $84K. Send resumes to 
Delaware Department of Labor 
Division of Employment and 
Training, 4425 North Market 
Street P.O.Box 9828 
Wilmington, DE., 19809-0828. 
Please refer to Job Order 
# DE 205529 


COMPUTER/IT 

Program Manager, Software 
Engineering. Req. Master's 
degree in Eng. or Comp. Sci 
and 3 yrs. of software engineer- 
ing experience. All stated expe- 
rience must include utilizing 
each of the following: C, C++ 
Visual Basic, C#, JD Edwards 
ERP system and CMM Level 2 
Plan, direct and coordinate the 
activities of team of software 
developers responsible for utiliz- 
ing the Capability Maturity Model 
for Software (CMM) Level 2 to 
identify the key practices 
required to assess and improve 
BE&K's software processes. 
Send Resumes to: D. Brasher, 
Job Reference #002, BE&K 
Engineering Company, 2000 
International Park Drive, 
Birmingham, Alabama, 35243 


Programmer Analyst 
(PeopleSoft Specialist) - 
Multiple Openings 


Structured systems analysis, de- 
sign, development, modification. 
testing, quality assurance, imp- 
lementation, integration, mainte 
nance and support of large vol. 
ume online complex integrated 
client-server based financial and 
human resource management 
application systems in a multi- 
hardware/multi-software envi- 
ronment using centralized or 
distributed Relational Database 
Management Systems (RDB- 
MS) such as DB2, Oracle, Sy- 
base, SQL Server, SQL Base 
and related software. Bachelor's 
Degree (or equivalent) in Com 
puter Science-Math/Engineering 
Science/Business-Commerce 
and 1 yr. experience in job of- 
fered or as Programmer Analyst/ 
Systems Analyst are required 
Must have appropriate combina- 
tion of skills as follows: 1 of A 
and 3 of B. A includes People- 
Soft Financials, PeopleSoft 
Human Resource Management 
and B includes PeopleTools 
PeopleCode, SQR, Crystal Re- 
ports, COBOL; High mobility 
preferred. 40 hrs/week, 8 am - 5 
pm. $66,533 - $78,000 per year. 
Qualified applicants should con- 
tact or send resume to: BECS/ 
CareerLink Program Supervisor, 
Indiana County CareerLink, 300 
Indian Springs Road, Indiana 
PA 15701. Refer to Job Order # 
WEB 444189. 


Information Specialist (Miramar, 
FL) - Design, construct, test and 
implement applications for 
sales, revenue and reservation 
systems in the transportation 
industry using Java and COBOL 
in UNIX, MVS and Windows 
environment; appiy CMM level 3 
practices and SCL software 
development life cycle method- 
ology to develop software; col- 
lect, define and organized 
detailed user requirements 
through interaction with cus- 
tomer; define scope, plans and 
deliverables for projects; enter 
program codes into computer 
system. Requires Bachelors in 
Electrical Engineering or 
Computer Science and either 4 
yrs exp in job offered or 4 yrs 
exp in designing and construct- 
ing applications for sales, rev- 
enue and reservation systems in 
the transportation industry using 
Java and COBOL in UNIX 
Salary $65,000/yr, Mon-Fri 
8AM-5PM, 40 hrs/wk. Send 
resume to Workforce Program 
Support, P.O. Box 10869 
Tallahassee, FL 32302-0869 
refer to J.O. # FL-2543510 


CONSULTING SERVICES EN- 
GINEER to study and analyze 
business processes of client 
companies to optimize efficiency 
of their transportation and sup- 
ply-chain resources; Develop 
large scale logistics decision 
support systems and cutting 
edge decision tools using scien- 
tific analysis, mathematical mod- 
els and algorithms, as well as 
computer skills including Visual 
Studio.NET, VB.NET, C#, SQL 
XML, ASP.NET, ADO.NET, MS 
MapPoint, MS Source Safe and 
Remote Administrator on Win- 
dows 2000/XP/NT platforms 
Develop and maintain database 
architecture for business object 
representation and distributed 
processing using SQL Server 
2000; Design and test highly- 
efficient complex database ob- 
jects including stored proce- 
dures, functions, triggers and 
constraints. Require: M.S. de- 
gree in Computer Science, an 
Engineering discipline, or a 
closely related field with 2 yrs. of 
exp. in the job offered. Extensive 
travel on assignment to various 
client sites within the U.S. is 
required. Competitive salary of- 
fered. Apply by resume to 
Manoj Madhavan Hybrid 
Solutions, Inc., 4600 Avocet 
Drive, Norcross, GA 30092; Attn 
Job SK 


IT PROFESSIONALS NEEDED 
MindTree Consulting, an estab- 
lished and expanding IT consult- 
ing company offering product 
realization services to Internet 
infrastructure and device ven- 
dors, is searching for qualified IT 
professionals to join its growing 
team. Presently, we have posi- 
tions for Technical Architects. 
Software Consultants (systems 
analysts, P/As, Soft. Enggs.) 
Experience with Cisco Router, 
Compaq servers, Implemented 
Checkpoint network security 
firewalls, Rational Rose, iPlanet 
Webserver, Sun Microsystem's 
J2EE architecture desired. Qual- 
ified applicants will have a bach- 
elor's degree in a relevant field 
and/or qualifying industry experi- 
ence. Positions may require 
relocation to various client sites 
throughout the United States 
Qualified applicants submit 
resumes to HR Department, The 
Tower at 270 Davidson Avenue. 
Suite 305, Somerset, NJ 08873. 


Senior Software Engineer to 
lead a team in the design, devel- 
opment, implementation, test- 
ing, maintenance, and support- 
ing application software in a 
clienvserver environment using 
object oriented programming 
Oracle, Java, J2EE, JSP, 
Serviet, JDBC, EJB, J2C, JMS, 
JAAS, HTML, XML, UML 
RDBMS, Struts, JavaScript, MS- 
Project, WSAD, and WAS under 
UNIX and Windows operating 
systems; Supervise and mentor 
junior programmers. Require 
B.S. degree in Computer 
Science, an Engineering disci- 
pline, or a closely related field 
with five years of progressively 
responsible experience in the 
job offered or as a Systems 
Analyst. Extensive travel on 
assignments to various client 
sites within the U.S. is required. 
Competitive salary offered 
Send resume to Sophie 
Mookerjie, President SPI, 3901 
Roswell Road, Suite 134 
Marietta, GA 30062. Job: JR 


PROGRAMMER ANALYST 
Consult with client to determine 
technical requirements, evaluate 
client's existing software, hard- 
ware and operating systems and 
analyze to determine necessary 
changes and modifications 
Develop necessary program- 
ming applications using tools 
such as VISUAL BASIC, VISU- 
AL FOXPRO and SQL. Salary 
$57,449.60/yr., 40 hr. work wk 
(9:00 a.m. to 5:00 p.m.). Re- 
quirements; B.A. in Engineering 
or Computer Science & One yr. 
Experience Programmer Analyst 
to include development of client 
programming using VISUAL 
BASIC and SQL. Employer Paid 
Ad. Send resumes to MDCD. 
P.O. Box 11170, Detroit, MI 
48202-1170 (Ref. #212196) 


Director of Engineering (with 
Masters and 4 years experi- 
ence or Bachelors with 9 years 
experience) - St. Louis, MO 
Job entails and requires expe- 
rience in project management 
and design and development 
of applications using Java 
VC++, VB, .Net, Java2D 
CORBA, COM, Adobe Post- 
script, and Adobe PDF. 
Relocation within USA possi- 
ble. Attractive compensation 
package. Send resume to Rod 
Zimmerman, Dynalivery Corp., 
320 Westport Plaza, Suite 205, 
St. Louis, MO 63146 


Computerworld + August 23, 2004 


IT|careers.com 


IT CAREER OPPORTUNITIES 


CALIFORNIA - (Corporate HQ 
Employment is throughout US) 
Sr. Computer Scientist 
Systems Analyst 


Positions require a BS and rele- 
vant experience; a combination 
of experience and college level 
education may be accepted. The 
flexibility to travel and be on-call 
may be necessary. Proof of legal 
authorization to work in the U.S. 
is required 

Please forward your resume to 
Computer Sciences Corp., Attn 
J. Le, 2100 E. Grand Ave., Mail 
Code A209, El Segundo, CA 
90245. Please indicate the spe- 
cific job title and location for 
which you are applying 


Database Administrator, Ft 
Lauderdale, FL: Define & ad- 
minister database organiza- 
tions, standards & procedures 
using RDB, VMS, SQL Server. 
Java, J2EE, WebSphere, XML 
Visual Basic, Cold Fusion 
DHTML, & Rational. Must have 
Bachelor's Degree in Com- 
puter Science & 3 yrs. exp. in 
job offered or with all phases of 
software development life 
cycle. Mail resume to ref #220. 
HR-Program, Spherion Corp- 
oration, 2050 Spectrum Bivd 
Ft. Lauderdale, FL 33309 


Abbott Laboratories seeks quali- 
fied Systems Analysts, Data- 
base Administrators, Applica- 
tions Programmers, Software 
Engineers and Software Spec- 
ialists with experience in one or 
more of the following technolo- 
gies: SAP, ABAP. BASIS, RDB- 
MS, SUN UNIX, Solaris, Oracle. 
AS/400, PL/SQL, Visual Basic 
C/C++, Windows, UNIX, SAS 
HTML, XML, Java, JSP, Java- 
Script Documentum LAN 
Lotus Notes. Respond by mail to 
Abbott Laboratories, Dept. 323. 
Bldg. AP6D2, 100 Abbott Park 
Road, Abbott Park IL 60064- 
32537. An EOE. Refer to ad 
code: IT-KE 


Software Engineer 


Requ: B.Sc. Elec. 
Eng & 2 yrs exp. 
Send resume to Jyoti 
Maewall, Computer 
Data Circuit, Inc, 69 
Milk St, Suite 220, 
Westboro, MA 01581. 


Multiple positions available for 
computer professionals includ- 
ing Soft. Eng.'s, Programmers 
Jr. Programmers, Systems 
Analysts, Network Analysts 
DBA'S, etc. Locations vary 
Req's BS, MS, or equiv. depend- 
ing on pos. & 1-2 yrs exp 
depending on pos. For some 
positions, we also accept any 
Suitable combination of educa- 
tion, training or experience in 
lieu of the req. edu. Travel/fre- 
quent relocation E.0.E 
Competitive salary & benefits 
Resume to: Pinnacle Talent, Inc 
‘Attn: HR 1919, Midwest Road, 
Suite 210, Oakbrook IL 60523 
Job ID #: FL8-11-04 
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Continued from page 1 
HP World 


“They haven’t shown up yet,” 
Slattery said. Normally, the sys- 


tems would have arrived within | 


five days, according to Slattery. 
He said that when they didn’t, 
he called HP and was told the 

servers were back-ordered. 

Slattery added that he didn’t 
know what was causing the 
shipment delay until he heard 
HP executives discuss the or- 
der-processing problems here 
at the HP World conference, 
which was sponsored by the 
independent Interex and En- 
compass user groups. “I never 
put it down to the supply 
chain mess,” he said. 

Kees denHartigh had a dif- 
ferent type of problem with an 
HP hardware delivery. A sys- 
tems and network analyst at 
the University of Alberta in 
Edmonton, denHartigh placed 
an order with HP last spring 
for new equipment that includ- 
ed Opteron-based servers and 
a storage array. He said that not 
one but two deliveries showed 
up at the school in June, lead- 
ing him to call HP as well. 


“They were right upfront 

| about it,” denHartigh said. 
“They were merging the ERP 
| systems between Compaq and 
HP, and they had some issues 
with duplication of the whole 
process. So the order went in 
at two places.” The extra 
equipment is still boxed, 
awaiting its return to the ven- 
dor, he added. 

HP officials have said that 
the supply chain problems 
stemmed from a poorly exe- 
cuted migration to a new 
| order-processing system 
| based on SAP AG’s ERP appli- 








WORLD attendees check out technology offerings on the show floor. 


cations [QuickLink 48819]. 
HP’s overall revenue rose 
9% in its third quarter, which 

ended July 31. But its enter- 
prise server and storage busi- 
ness fell 5%, prompting CEO 
Carly Fiorina to fire three ex- 


| ecutives because of what she 


called “unacceptable execu- 
tion” within that unit. 

Mark Gonzalez, vice presi- 
dent of enterprise server and 


| storage sales for HP Americas, 
| said the troubles began over 
| the July 4 weekend, when HP 


went live with the SAP-based 
system to replace three order- 





processing applications that it 
had after its 2002 acquisition 
of Compaq Computer Corp. 
“It’s systems talking to sys- 
tems,” Gonzalez said. “It just 
did not quite work out.” He 


| added that customers should 


no longer experience delays 
on storage products or Unix 
servers. Processing of Pro- 
Liant server orders is “pretty 
much back on track, with the 
exception of a couple of com- 
plex, configure-to-order type 
things,” Gonzalez said. “The 
worst is behind us.” 

At the conference, HP offi- 
cials were also adamant that 
the company won’t make any _ | 
changes in its technology direc- | 


| tion because of the poor third- 
| quarter results. But that didn’t 


stop users such as Paul Gerke, 
systems administrator for 
Clark County in Vancouver, 
Wash., from voicing concern 
about the possibility that HP 
could alter some of its system 


| development plans. 


“Quarterly news can change | 


| very quickly,” said Gerke, who | 


manages HP-UX systems. Re- 


| ferring to HP’s decision to 
| phase out its HP 3000 mini- 
| computer line, he said, “You 


HP Exec Blames Server Shortfall on ‘Internal Execution Issues’ 


BY ROBERT McMILLAN AND 
PATRICK THIBODEAU 


When HP 
missed earn- 
ings expecta- 
tions for its 
third quarter 
two weeks ago, 
the company 
placed the 
blame squarely 
on the shoul- 
ders of its Enterprise Servers and 
Storage division - leading to the 
sacking of three senior execu- 
tives within that unit [QuickLink 
48813]. 

Ann Livermore, executive 
vice president of HP’s Technolo- 
gy Solutions Group, manages 
servers and storage as well as 


the vendor's software and IT ser- 
vices units. She spoke with Com- 
puterworld and the IDG News 
Service at HP World. 


Why did the enterprise com- 
puting group lose money in 
the third quarter? There were 
really a couple of main areas 
where we didn’t execute as well 
as we needed to this quarter. In 
the United States, we were tran- 
sitioning to a new system and set 
of business processes for our or- 
der management and manufac- 
turing operations, and that transi- 
tion caused more disruption than 
we had planned. 

In Europe, we had some issues 
around our channel management 
processes. We also had, in a few 


instances in [Europe, the Middle 
East and Africa], more aggressive 
discounting than what we had 
originally planned for. So the 
good news - or the bad news - is 
that they are all internal execution 
issues we can address ourselves. 
They're not things that are funda- 
mental weaknesses in our busi- 
ness offerings. 


You’re getting rid of the Alpha 
chip and moving from PA- 
RISC to Itanium. Is there any 
sense that the decline in sales 
may be indicative of cus- 
tomers just not wanting to 
move to Itanium? No. What 
we're seeing with Itanium is that 
our quarter-to-quarter ramp is as 
we've expected. And our Unix 


growth last quarter was 8%, 
which is a good year-over-year 
growth rate. 


When you say Unix growth 
was 8%, do you mean on Ita- 
nium? Unix growth overall. 


What was it just on Itanium? 
You know, | didn’t bring with me 
the specific breakdown in terms 
of what the PA-RISC growth was 
versus the Itanium. But the thing 
we're seeing that we like from an 
Itanium perspective is that the 
ISV [independent software ven- 
dor] applications and ports are 
going really well. Our ISV partners 
have all believed that the migra- 
tion has been easier than what 
we planned. 


have to wonder, if we start see- 
ing declining results for Unix, 
is that the next thing [to go]?” 

John Hohenfeld, operations 
manager at the 55,000-student 
Cuyahoga Community College 
in Cleveland, said HP’s finan- 
cial results “made me wonder 
a little, but I think they are 
very safe” as a vendor. 

Safe for users, perhaps. But 
when Denys Beauchemin, 
chairman of Interex’s board of 
directors, opened the floor for 
questions during a panel ses- 
sion featuring HP executives, 
he invited attendees to “fire 
away” with their questions. 

That choice of words 
prompted one HP official on 
the panel to quickly retort, 
“Don’t fire away,” drawing 
laughter from the audience. 


Robert McMillan of the IDG 
News Service contributed to 
this story. 


Offshore customer support and the future 
of HP-related conferences were also hot 
topics at HP World 
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IBM is sticking with its Power 
architecture, and Sun is stick- 
ing with UltraSparc. Is any- 
thing in your financial results 
or in the feedback you get 
from users giving you grounds 
for doubt about HP’s Itanium- 
only strategy? No. And we don't 
have an Itanium-only strategy. 
From a customer perspective, we 
have a very simple set of archi- 
tectures: We have Itanium, and 
we have x86. A lot of the power 
of HP from a computing perspec- 
tive is we do offer both. 


McMillan is a reporter for the 

IDG News Service. 

An expanded version of this interview 

can be found on our Web site: 
QuickLink 48879 
www.computerworld.com 
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The Power of No 


T WAS JUST LAST YEAR that the London borough of 

Newham couldn’t afford to upgrade its aging Microsoft Ex- 

change 5.5 server. Then Newham contacted an open-source 

consulting firm, Netproject, for a study to see whether Linux 

desktops would be a workable option for the local govern- 
ment. By November, there was a credible Linux plan set for adop- 
tion, subject to further negotiations with Microsoft. 

Last week, Newham announced a new 10-year, $9 million deal 
with Microsoft. The local government that couldn’t afford an Ex- 
change upgrade will now get that, plus up-to-date desktop software, 
plus a batch of tablet PCs for the borough’s social workers. 


Now that’s bargaining power. 


Officially, Newham’s decision was based in 
large part on a Capgemini study, commissioned 
by Microsoft, that concluded that Newham 
would not only save a bundle by staying with 
Windows, but would also have fewer security 
problems. Yeah, right. 

Unofficially, and much more believably, the 
deal went down like this: Newham had a viable 
Linux alternative to Windows (and a lot of 
press attention for being a highly visible Linux 
poster child). Microsoft negotiated. Newham 
ended up with a truckload of goodies that it 
couldn’t afford before. 

Pretty slick, eh? True, the Linux advocates say 
they feel used. They’re right — they were used. 
All the available evidence suggests that New- 
ham’s IT boss, Richard Steel, never really want- 
ed to go through the expense and trouble of 
dumping Windows and all the other Microsoft 
products Newham was using in favor of Linux 
and open-source alternatives. 

But when Steel went to negotiate the deal 
with Microsoft, that competing 
open-source proposal was on the 
table. It meant Steel could walk 
away from Microsoft if he had to. 

He had the power to say no to any- 
thing short of the deal he wanted. 

Was it a bluff? Only Steel knows, 
and he’s not saying. But Microsoft 
believed Newham could go with 
Linux. Microsoft wasn’t willing to 
take that chance. And that got 
Newham one heck of a deal. 

Think you can’t possibly get that 
kind of leverage in your own deal- 
ings with software vendors? You’re 
probably right — chances are, you 





don’t want that much publicity for any IT-relat- 
ed negotiation. 

But can you take a few lessons from the 
Newham deal? Sure. 

Start by remembering that if you can’t say no, 
it’s not a negotiation. If you can’t walk away 
from the table, you have no leverage at ali. 

So be sure you always have a viable alterna- 
tive when you sit down with a vendor. Maybe 
that means one or more competitors’ products. 
Maybe it means open-source. Or a homegrown 
system. Or just standing pat. But make sure you 
can say no. 

Then forget about being a nice guy. Use those 
competitors against one another. Somebody in 
this deal is going to lose. Make sure it’s not you. 

Know what you want to get from the deal, 
what your bottom line is and how much it will 
take to get you to say yes. But don’t say yes until 
the other guy has run out of things to offer. 

Take your time — the Newham deal took 
months to finalize. Keep upper management in 

the loop, so you won’t be undercut 
when somebody gets unhappy at 
how things are going. 

And when the time comes, do 
the deal and damn the conse- 
quences. The losers will howl be- 
cause they lost. The winners will 
moan because you squeezed them 
so hard. That’s OK — you don’t 
work for them. 

For the organization you do work 
for, you may not get a Newham- 
size advantage. But if Newham can 
do it, you can too. And these days, 
you need all the bargaining power 
you can get. @ 48930 
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phone calls are breaking up. So the network team 
puts a sniffer on the line and tracks down something 


_ on the network that’s using a lot of bandwidth. “The 


bandwidth hog is listening to an Internet radio station,” 
says a pilot fish on-scene. “And it's the caller's own 
PC.” Her response? “Ohhhhh. | didnotice it started 
about the time | started listening to that radio station.” 


All Wet Idiot? You? 
Sen a 
water 
in his keyboard. TANK. for this auto 
But he has dried mechanic, so 
it out pretty well, he tells : support pilot fish walks 
help desk pilot fish. Still, ; him through the usual 
when he triestotype  : questions: Is it plugged 
using one of the keys ; in? Cable connected to 
that got wet, the system : the printer? Any alarm 
acts up or reboots. Is it lights? “What, do you 
because the keyboardis : : think I'm an idiot?” me- 
still damp? “1 explained : chanic snaps. Next, fish 
that by hitting a key, he _ stops mechanic through 
was causing an electri- : the process of printing a 
cal circuit to close, but : test page. Did anything 
because of the water, — _ pint ut? ich asks him, 
he was closing multiple ; “Not yet,” says mechan- 
circuits and sending bad : ic. “Let me put paper in 
signals to the comput- i itfirst.” 
er,” says fish. User's 
reply: “No I'm not. 'm 


sea oer an ton wes et 
and she needs it right had to connect 
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